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Intellectual Property Rights 

IPRs essential or potentially essential to the present document may have been declared to ETSI. The information 
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non- members, and can be found 
in ETSI SR 000 3 1 4: Intellectual Property Rights (JPRs): Essential, or potentially Essential. IPRs notified to ETSI in 
respect of ETSI standards", which is available from the ETSI Secretariat Latest updates are available on the ETSI Web 
server (http://webapp.etsi.org/IPR/home.aspy 

Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee 
can be given as to the existence of other IPRs not referenced in ETSI SR 000 3 14 (or the updates on the ETSI Web 
server) which are, or may be, or may become, essential to the present document. 



Foreword 

This Technical Specification (TS) has been produced by ETSI Project Terrestrial Trunked Radio (TETRA). 

The present document is part 2 of a multi-part deliverable covering the Subscriber Identity Module to Mobile 
Equipment (SIM-ME) interface, as identified below: 

TS 100 812-1 : "Universal Integrated Circuit Card (UICC); Physical and logical characteristics ,, ; 

TS 100 812-2: "Universal Integrated Circuit Card (UICC); Characteristics of the TS1M application"; 

EN 300 812-3: "Integrated Circuit (1C); Physical, logical and TSIM application characteristics". 

NOTE: Part 3 was originally published as EN 300 8 12 and defines different technology than part 1 and part 2. 



Introduction 

The present document defines TETRA SIM application to be used with the generic terminal/Integrated Circuit Card 
(ICC) interface. 
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1 Scope 

The prcsem document defines the TETRA SIM CTSIM") application for TETRA mobile radio neiwork operation. 
The present document specifies: 

• specific command parameters; 

• file structures; 

• contents of EFs (Elementary Files): 

• security functions; 

• application protocol to be used on the interface between UICC and ME. 

This is to ensure interoperability between a TSIM/UICC combination and an ME in accordance with the requirements 
laid down in ETR 295 [I J. 

Common files and commands are specified in TS 1 02 22 1 [14] to which reference should be made. 

The present document docs not define any aspects related to the administrative management phase of the TSLM. Any 
internal technical realization of either the TSIM or the ME is only specified where this is reflected over the ME-TSIM 
interface. 



2 References 

The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References arc either specific (identified by date of publication and/or edition number or version number) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. 

Referenced documents which are not found to be publicly available in the expected location might be found at 
http://docbox.eLsi.org/Referencc . 

EH ETSt ETR 295: "Terrestrial Trunked Radio (TETRA); User requirements for Subscriber Identity 

Module (SIM)". 

[2] ETSI EN 300 392- 1 : "Terrestrial Trunked Radio (TETRA); Voice plus Data (V+D); 

Part 1 : General network design". 

[3] ETSI EN 300 392-2: "Terrestrial Trunked Radio (TETRA); Voice plus Data (V+D); Part 2: Air 

Interface (Al)\ 

Wl ETSI EN 300 392-7: "Terrestrial Trunked Radio (TETRA): Voice plus Data (V+D); 

Part 7: Security". 

PI ETSI TS 100 977: "Digital cellular telecommunications system (Phase 2+); Specification of the 

Subscriber Identity Module - Mobile Equipment (S1M-ME) interface (3GPPTS 11.11 
version 8.6.0 Release 1 999)". 

l°I ITU-T Recommendation T.50: "International Reference Alphabet (IRA) (Formerly Internationa! 

Alphabet No. 5 or IA5) - Information technology - 7-bit coded character set for information 
interchange". 

( 7 I ETSI ETS 300 396-6: "Terrestrial Trunked Radio (TETRA): Direct Mode Operation (DMO); 

Part 6: Security". 
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W ETSI ETS 300 392- 12-22: "Terrestrial Trunkcd Radio (TETRA); Voice plus Data (V+D); 

Part 12: Supplementary services stage 3;~Sub-part 22: Dynamic Group Number Assignment 
(DGNA)". 

I 9 I ISO/1EC 8859- 1 : "Information technology - 8-bit single-byte coded graphic character sets • 

Part 1 : Latin alphabet No. I 

[10] ETSI ETS 300 394-2 (Edition I) (all sub-parts): "Terrestrial Trunkcd Radio (TETRA); 

Conformance testing specification; Part 2: Protocol testing specification for Voice plus Data 
(V+D)". 

1 1 1 J ETSI TS 100 940: "Digital cellular telecommunications system (Phase 2+); Mobile radio interface 

layer 3 specification (3GPP TS 04.08 version 7.17.0 Release 1998)". 

[12] ETSI TS 100 927: "Digital cellular telecommunications system (Phase 2+); Numbering. 

Addressing and Identification (3GPP TS 03.03 version 7.6.0 Release 1998)". 

[13] ISO/1EC 7816-9: "Identification cards - Integrated circuit(s) cards with contacts - 

Part 9: Additional interindustry commands and security attributes". 

1 141 ETSI TS 102 221 : "Smart cards; UlCC-Termina! interface; Physical and logical characteristics 

(Release 5)". 



3 Definitions, symbols and abbreviations 



3.1 Definitions 

For the purposes of the present document, the terms and definitions given in TS 102 221 [141, EN 300 392-1 [2] and the 
following apply: 

access conditions: set of security attributes associated with access to an Elementary File (EF) 
NOTE: ADM (administrative): 

indicates an access condition defined by the card issuer. Before issue of the card ADM serves as a 
placeholder for an access condition to be defined by the card issuer. Any access condition may be 
assigned. The assigned access condition is used during the usage phase of the SIM; 

PINn (personal identification number): 

defines the access condition to an EF which requires verification of the user identity (n = I or 
n = 2); 

NEV (never): 

access to the EF is never allowed across the SiM-ME interface, 
administrative phase: part of the card life between the manufacturing phase and the usage phase 
card holder verification: authentication of the user to the SIM card 

key generator: secure system entity authorized to generate Static Cipher Keys (SCKs) for Direct Mode Operation 
(DMO) 

key holder: secure system entity authorized to distribute SCKs for DMO 

key user: standard Direct Mode (DM) terminal which uses SCKs provided by an authorized key holder 
Mobile Equipment (ME): part of the MS which interfaces to the SIM card 

Mobile Station (MS): entirety of the equipment needed to communicate with the infrastructure (in trunked mode of 
operation) or direct with another MS (in direct mode of operation) 
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personalization: addition of subscriber and end user data to the appropriate EFs in the SIM during the administrative 
phase of a card's life cycle 

pre-personalization: assignment of EF values at the manufacturing phase of a card's life cycle 
TETRA application: set of security mechanisms, files, data and protocols required by TETRA 
TETRA session: part of the card session dedicated to the TETRA operation 
TETRA SIM: subscriber identity module used in a TETRA MS 
TSIM: TETRA SIM application supported by the UICC 

usage phase: part of the card life, after the administrative phase, when the card is being used for operational purposes 

3.2 Symbols 

For the purposes of the present document, the following symbols apply: 
"0" to "9" and "A" to "F The sixteen hexadecimal digits 

3.3 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 



ADF 


Annlirnlinn Dedicated File 


/AL/1V1 


ADN/liniQimiive f«*ee definitions^ 


ADN 


Abbreviated Dialling Number 


ALW 


A L Ways 


APN 


Access Point Name 


BCD 


Binary Coded Decimal 


CCK 


Common Cipher Key 


CCK-id 


CCK- identifier 


CLA 


CLAss 


DOC 


Derived Cipher Key 


DCKl 


Part 1 of the DCK 


DCK2 


Part 2 of the DCK 


DF 


Dedicated File 


DGNA 


Dynamic Group Number Assignment 


DMO 


Direct Mode Operation 


EF 


Elementary File 


FCP 


File Control Parameters 


FDN 


Fixed Dialling Number 


FSSN 


Fleet Specific Short Number 


GCK 


Group Cipher Key 


GCK-VN 


GCK- Version Number 


GGSN 


Gateway GPRS Support Node 


GPRS 


General Packet Radio Service 


GSSI 


Group Short Subscriber Identity 


GTSI 


Group Tctra Subscriber Identity 


IC 


Integrated Circuit 


ID 


lDcntifier 


IP 


Internet Protocol 


1SSI 


Individual Short Subscriber Identity 


ITSI 


Individual TETRA Subscriber Identity 


K 


individual subscriber authentication Key 


ICE 


Enhanced security Key 


LND 


Last Number Dialled 


LSB 


Least Significant Bit 


MCC 


Mobile Country Code 


ME 


Mobile Equipment 



ETSI 



11 



eTS » TS 100 812-2 V2.3.1 (2003- 



MCCK 
MMl 
NINC 

MS 

MSB 

NET 

NEV 

OTAR 

pABX 

PIN 
PS_DO 
PSTN 
RAND I 
RAND2 
RES I 
RES2 
RFU 
RS 
RSO 
SCCK 
SCK 
SCKN 
SCK.-VN 

SDN 
SDS 

SE1D ' 
SCCK 
SIM 
SSC 
SSCK 
SSI 
SwMl 
TE 
TLV 
TON 
TP 

U1CC 
XRES2 



Master File 

Modify Group Ctphe Key 
Man Machine imer^c 
Mobile Network Code 

Mobile Station 
Most Sigmltcant Bit 

SEVer°(see definitions) 

RANDom challenge I 
RANDom challenge 2 
RESponse I 

ECSS-or*. 

Sealed CCK 
Static Cipher Key 
SCK Number 
crK-Version Number 
Service Dialling Number 

Supplementary 5>ervi<- 
Sealed SCK .„ nI :. v 

Shon Subscriber Idem y ^ wc c 
Switching andMan ^. enhanced security on SIM ^ 
TETRA algorithm 
Tag, Ungth, Value 
Type Of Number 

expected RESponse 2 



Void 
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7 Security features 
7.1 General on security 

The security aspects of TETRA are described in EN 300 392-7 [4] and ETS 300 396-6 [71. This clause gives 
information related lo security features supported by the SIM to enable the following: 

• authentication of the subscriber identity lo the network; 

• data confidentiality over the air interface; 

• confidentiality of air interface keys when passed over (he SIM-ME interface; 

• file access conditions. 

The security of an MS is defined by security class (see EN 300 392-7 [4]). Table 1 indicates for which class the SIM 
has to provide security functions and key storage. 

Table 1: Security functions and key storage 



Class 



Authentication 



M 



Key store 



n/a 



SCK 



DCK, CCK. GCK, 
MGCK 



OTAR SCK 



n/a 



OTAR GCK 



n/a 



n/a 



OTAR CCK 



n/a 



n/a 



M 



NOTE 1: Where authentication is provided the SIM shall also store K (not in an accessible EF). 
NOTE 2: M = Mandatory. O g Optional and n/a g not applicable. . 



7.2 Authentication and cipher key generation procedure 

This clause describes the authentication mechanism and cipher key generation which are invoked by the network and 
the SIM. 

The names and parameters of the authentication algorithms supported by the SIM are defined in EN 300 392-7 [4]. 
These are: 

• algorithms TAl 1/TAI2 to authenticate the SIM to the SwMI; 
algorithms TA21 /TA22 to authenticate the SwMI to the SIM. 

The cipher key generation algorithm supported by the SIM is defined in EN 300 392-7 14] and is required only for a 
SIM-ME pair supporting Class 3 security. This is: 

• algorithm TB4 to generate the Derived Cipher Key (DCK). 
These algorithms may exist either discretely or combined within the SIM. 

7.3 Support of Over The Air Re-keying (OTAR) distribution f 
cipher keys 

The names and parameters of the OTAR algorithms supported by the SIM are defined in EN 300 392-7 14] and 

ETS 300 396-6 [7]. These are: 

. algorithm TA32 to obtain the Common Cipher Key (CCK) from the Sealed CCK (SCCK): 

. algorithm TA41/TA82 to obtain the Group Cipher Key (GCK) from the Sealed Group Cipher Key (SGCK); 

. algorithm TA4 1/TA52 to obtain the Static Cipher Key (SCK) from the Sealed SCK (SSCK); 
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• algorithm TA71/TE to obtain the Modified Group Cipher Key (MGCK) from the GCK. Reino: is ii so that the 
TE is not applicable in ES 200 8 1 2-2 but is applicable in EN 300 8 12-3; 

• algorithm TA41/TA92 to obtain the Group Sealing Key GSKO from the sealed SGSKO: 

• algorithm TB7/TA52 to obtain the SCK from the SSCK distributed by OTAR in case of group address 

delivery; 

• algorithm TB7/TA82 to obtain the Group Cipher Key (GCK) from the Sealed Group Cipher Key (SGCK) in 
case of group address delivery. 

These algorithms may exist either discretely or combined within the SIM. 

7.4 Support of SIM-ME enhanced security 

Enhanced security for DCK, CCK, SCK and MGCK on the SIM-ME interface in SIM-ME pairs supporting security 
Class 2 and 3 is supported by use of the TETRA algorithm for enhanced security on SIM-ME interface (TE) algorithm. 
When enhanced SIM-ME security is required (SIM Service 20 set): 

• algorithm immediately following TB4 algorithm; 

• CCK, SCK and MGCK arc sealed by the TE algorithm as pan of the "Read EF" command. 

7.5 Storage of DCK 

After successful authentication DCK shall be stored on the SIM for further use to unseal cipher keys for the duration of 
the authentication session, refer to EN 300 392-7 [4|, clause 3.1 for the authentication session. 

7.6 User verification and file access conditions 

The TETRA application uses 2 PINs for user verification, PIN and PIN2. PIN2 is used only in the ADF. The PIN and 
P1N2 are mapped into key references as defined in TS 102 221 [14). Each key reference is associated with a usage 
qualifier as defined in ISO/1EC 7816-9 [13]. The PIN status is indicated in the PS_D(X which is part of the FCP 
response when an ADF/DF is selected. The coding of the PSJX) is defined in TS 102 221 [14]. 

PIN and PIN2 are coded on 8 bytes. Only (decimal) digits (0 to 9) shall be used, coded in rTU-T Recommendation 
T.50 [6] with bit 8 set to zero. The minimum number of digits is 4. If the number of digits presented by the user is less 
than 8 then the ME shall pad the presented PIN with TF" before sending it to the SIM. 

The coding of the UNBLOCK PINs is identical to the coding of the PINs. However, the number of (decimal) digits is 
always 8. 

The security architecture as defined in TS 102 221 [ I4J applies to the TETRA application with the following definitions 

and additions: 

• the TETRA application shall use key reference "01" as PIN and key reference "81" as P1N2. For access to 
DFTelecom the PIN shall be verified. Access with PIN2 is limited to the TETRA application; 

• the only valid usage qualifier is "08 n which means user authentication knowledge based (PIN) as defined in 
ISO/IEC 7816-9 [13]. The terminal shall support the multi-application capabilities as defined in 

TS 102 221 (14]; 

• every file in the TETRA application shall have a reference to an access rule stored in EF ARR ; 

• every file under DF Tclccom shall have a reference to an access rule stored in EF ARR under DF TcIccom ; 

• a multi-application capability UICC (from the security context point of view) shall support the referenced 
format using SEID as defined in TS 102 221 [14]; 
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a multi-application capability UICC (from ihc security context point of view) shall support the replacement of 
a TETRA application PIN with the Universal PIN ? key reference "Of, as defined in TS 102 221 [ 14]. Only the 
Universal PIN is allowed as a replacement; 

• a terminal shall support the use of level l and level 2 user verification requirements as defined in 
TS I02 22I [14); 

a terminal shall support the replacement of a TETRA application PIN with the Universal PIN, key reference 
"01", as defined inTS 102 221 [141; 

• a terminal shall support the security attributes defined using tag's "8C\ "AB M and "8B" as defined in 

TS 102 221 [14]. In addition both the referencing methods indicated by tag H 8B M shall be supported as defined 
inTS 102 221 [14]. 

The access rule is referenced in the FCP using tag "8B*\ The TLV object contains the file ID (the file ID of EF ARR ) and 
record number, or file ID (the file ID of EF ARR ). SEID and record number, pointer to the record in EF ARR where the 
access rule is stored. Each SEID refers to a record number in EF ARR . EFs having the same access rule use the same 
record reference in EF ARR . For an example EF ARR , see TS 102 221 [14]. 



8 Void 



9 TETRA Commands 

9.1 AUTHENTICATE 

9.1 .1 Command description 

The function is used during the procedure for authenticating the SIM to its SwMI and vice versa and key management. 

The function is related to a particular TETRA-application and shall not be executable unless the TETRA or any 
sub-directory has been selected as the Current Directory and a successful PIN verification procedure has been 
performed. 

The function can be used in following contexts: 

• TETRA TAI 1/TA12 ALGORITHM ; 

• TETRA TA2 1 /TA22 ALGORITHM; 

• TETRA TB4/TE ALGORITHM; 

• TETRA TA32 ALGORITHM; 

• TETRA TA4 17TA82 ALGORITHM; 

• TETRA TA41/TA52 ALGORITHM; 
TETRA TA7 l/TE ALGORITHM; 
TETRA TA4 1ATA92 ALGORITHM; 

• TETRA TB7/TA52 ALGORITHM ; 
TETRA TB7/TA82 ALGORITHM. 
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9.1.1.1 TETRA TA1 1/TA1 2 ALGORITHM 

This function, initialed by the SwMI, is used for authenticating the SIM to the TETRA network (SwMI). 

• Input from ME: RANDom challenge I (RAND I). Random Seed (RS). 

• Input from SIM: K. 

• Output to SIM: DCKl. 

• Output to ME: Response I (RESl). 

RES 1 shall be obtained from the SIM by use of the GET RESPONSE command. 

9.1 .1 .2 TETRA TA21/TA22 ALGORITHM 

This function, initiated by the SIM, is used for authenticating the TETRA network (SwMI) to the SIM. 

• Input from ME: Response 2 (RES2), RS. 

• Input from STM: K, RAND2. 

• Output to SIM: DCK2. 

• Output to ME: XRES2. 

XRES2 shall be obtained from the SIM by use of the GET RESPONSE command. 

Before running TA21/TA22 ME shall run the GET CHALLENGE command. The result random challenge shall be 
stored internally on the SIM and used as input RAND2. 

NOTE: The ME is informed about the success of the operation via the status condition [R2] returned by the SIM. 

9.1.1.3 TB4/TE ALGORITHM 

This function is used lo obtain the DCK from its two parts DCKl and DCK2 by use of the specified algorithm TB4. If 
SIM Service 20 is set (enhanced SIM-ME security) the enhanced security algorithm TE is automatically run by the SIM 
to seal DCK with KE before sending it to the ME. 

• Input from SIM: DCKl , DCK2, optionally KE (if SIM Service 20 is set). 

• Output to SIM: DCK. 

• Output to ME: DCK (sealed by KE if service 20 is set). 

In the case of mutual authentication between SIM and SwMI (authentication in both directions) the inputs DCKl and 
DCK2 shall be obtained internally from the TA 1 1/TA1 2 and TA2 1/TA22 algorithms respectively. In the case of 
unilateral authentication, either DCKl or DCK2 shall be set to zero; for SIM authentication DCK2 = 0; for SwMI 
authentication DCKl = 0. 

9.1.1.4 TA32 ALGORITHM 

This function is used to obtain the CCK from the SCCK by use of the specified algorithm TA32. The SCCK can be 
delivered to the ME in sealed format by an OTAR procedure. The SCCK shall be unsealed on the SIM and the CCK 
stored on the SIM for subsequent use in the ME. 

• Input from ME: SCCK, CCK-id t Record number (to be updated). 

• Input from SIM: DCK. 

• Output to EF; CCK. CCK-id. 

• Output to ME: None. 
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NOTE: The ME is informed about the success of the operation via the status condition (manipulation flag) 
returned by the SIM. 

9.1.1.5 TA41/TA82 ALGORITHM 

This function shall be used to compute GCK and CCKN from SGCK, GCK. Version Number (GCK-VN) and KSO. 
. Input from ME: SGCK. GCK-VN. Random Seed for OTAR (RSO). 

• Input from SIM: K. 

• Output to EF: GCK (to EFGCK). GCKN. 

• Output to ME: None. 

NOTE 1 : GCKs are not accessible over the SIM-ME interface. 

NOTE 2: The ME is informed about the success or the operation via the status condition (manipulation nag) 
returned by lite SIM. 

9. 1 .1 .6 TA41/TA52 ALGORITHM 

This function is used to obtain the SCK from the SSCK which may be distributed by OTAR. The SSCKs shall be 
unsealed on the SIM and the SCK stored on the SIM for subsequent use in the ME. 

. Input from ME: SSCK, SCK-VN. Random Seed for OTAR (RSO). 

• Input from SIM: K. 

• Output to EF: SCK, SCKN. 

• Output to ME: None. 

NOTE: The ME is informed about the success of the operation via the status condition (manipulation nag) 
returned by the SIM. 

Algorithm TA52 shall output SCKN which shall be used as an index to the record in EF SCK . The record number shall 
be updated only if the Manipulation nag is TRUE. 

9.1 .1 .7 TA71/TE ALGORITHM 

Thk function shall be used to obtain the MGCK from the GCK and the CCK by use of the specified algorithm TA7 1 . 
5? « S22^ a new GCK is distributed or when a new CCK is issued (for instance caused by 
entering a new location area). 

• Inpul from ME: record number in EFCCK to be used. GCKN, GCK-VN. 

• Input from EF: GCK, CCK. 

• Output to EF: None. 

. Output to ME: MGCK (encrypted using TE algorithm in case SIM enhanced service is enabled). 
9.1.1.8 TB7/TA52 ALGORITHM 

This function is used to obtain the SCK from the SSCK which may be distributed by OTAR in case of group address 
SvSlS SSCKs shall be unsealed on the SIM and the SCK stored on the SIM for subsequent use ,n the ME. 

Input from ME: SSCK, SCK-VN. 
Input from SIM: GSKO. 
Output to EF: SCK, SCKN. 



QMCfW-irV 'YD 
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• Output to ME: None. 

NOTE: The ME is informed about ihe success of ihc operaiion via the status condition (manipulation flag) 
returned by the SIM. 

9.1 .1 .9 TA41/TA92 ALGORITHM 

This function is used to obtain the GSKO. See EN 300 392-7 [4] clause 4.2.5. 

• Input from ME: SGSKCX GSKO-VN, RSO. 

• Input from SIM: K. 

• Output to EF: GSKO. 

• Output to ME: None. 

NOTE: The ME is informed about the success of the operation via the status condition (manipulation flag) 
returned by the SIM. 



9.1.1.10 



TB7fTA52 ALGORITHM 



This function is used to obtain the GCK from ihe SGCK which may be distributed by OTAR in case of group address 
delivery. The SGCKs shall be unsealed on the SIM and the GCK stored on the SIM for subsequent use in the ME. 

Input from ME: SGCK, GCK-VN. 

• Input from SIM: GSKO. 

• Output ro EF: GCK, GCKN. 

• Output to ME: None. 

NOTE: The ME is informed about the success of the operation via the status condition (manipulation flag) 
returned by the SIM). 

9.2 Coding of the commands 

The AUTHENTICATE command contents shall be as defined in table 2. 

Table 2: Contents of the AUTENTICATE command 



Code 


Value 1 


CLA 


As specified in TS 102 221 |1 4] 


INS 


"88- 


P1 


W 


P2 


See table 3 


Lc 




Data 




Le 


"00", or maximum lenqth of data expected in response 
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Parameter P2 shall specify the authentication context as defined in table 3. 



Table 3: Coding of the reference control P2 



Coding 
bft-b1 


Meaning 




Specific reference data (e.q. DF specific/aDDltcation dependant key) 

•00" 


"-XXXXX" 


Authentication context: 

00000 RFU 

00001 TA11/TA1 2 ALGORITHM 

00010 TA21/TA22 ALGORITHM 

00011 TB4/TE ALGORITHM 

00100 TA32 ALGORITHM 

00101 TA41/TA82 ALGORITHM 

001 10 TA41/TA52 ALGORITHM 

001 1 1 TA71/TE ALGORITHM 

01000 TA41/TA92 ALGORITHM 

01001 TB7/TA52 ALGORITHM 
01010 TB7/TA82 ALGORITHM 



All other codings shall be RFU. 

Command parameters/data, case 1 TA1 I/TA12 ALGORITHM contents shall be as defined in table 4. 



Table 4: Contents of the case 1 TA11/TA12 ALGORITHM command 



Byte(s) 


Description 


Length 
10 


) to 10 
1 1 to 20 


RAND1 
RS 


10 



See EN 300 392-7 [4 J for use of RES1 and for size of the cryptographic parameters. 
Command parameters/data, case 2 TA21/TA22 ALGORITHM contents shall be as defined i 



Table 5: Contents of the case 2 TA21H"A22 ALGORITHM command 



Byte(s) 


Description 


Length 


1 to 4 


RES2 


— i— I 


5 to 14 


RS 





Command parameters/data, case 4 TA32 ALGORITHM contents shall be as defined in table 



Table 6: Contents of the case 4 TA32 ALGORITHM command 



Byte(s) 


Description 


Length 


1 to 15 


,SCCK . 


15 


16 to 17 


CCK-id 


2 


18 


Record number . 


1 



Command parameters/data, case 5 TA4I/TA82 ALGORITHM contents shall be as defined i 



Table 7: Contents of the case 5 TA41/TA82 ALGORITHM command 



Byte(s) 


Description 


Length 


1 to 15 


SGCK 


I 15 


16 to 17 


GCK-VN 


2 


18 to 27 


RSO 


10 
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Command parameters/data, case 6 TA4I/TA52 ALGORITHM contents shall be as defined in table 8. 



Table 8: Contents of the case 6 TA41/TA52 ALGORITHM command 



Byte(s) 


Description 


Length 


1 to 15 


SSCK 


15 


16 to 17 


SCK-VN 


2 


18 to 27 


RSO 


10 



Command parameters/data, case 7 TA7 1/TE ALGORITHM contents shall be as defined in table 9. 



Table 9: Contents of the case 7 TA71 ALGORITHM command 



Byte(s) 


Description 


Length 


1 


Target record in EF MGCK 


1 


2 


Input record from EF CCK 


1 


Table 10: Contents of the case 7 TA71/TE ALGORITHM command 


Byte(s) 


Description 


Length 








1 


Input record from E^cCK 


1 (see note) 


2 to 3 


GCKN 


2 


4 to 5 


GCK-VN 


2 


NOTE: The input record from EF CCK specifies the record number (1 or 2) in EF CCK from 


which the CCK shall be retrieved. 





Command parameters/data, case 8, TA41/TA92 ALGORITHM contents shall be as defined in table 9? 



Table 9: Contents of the case 8 TA41/TA92 ALGORITHM command 



Byte(s) 


Description 


Length 


1 to 15 


SGSKO 


15 


16 to 17 


GSKO-VN 


2 


18 to 27 


RSO 


10 



Command parameters/data, case 9, TB7/TA52 ALGORITHM contents shall be as defined in tabic 10. 



Table 10: Contents of the case 9 TA41/TA92 ALGORITHM command 



Byte{s) 


Description 


Length 


1 


Record Number for GSKO 


1 


2 to 16 


SSCK Zl 


15 


17 to 18 


SCK-VN 


2 



Command parametersAiaia, case 10, TB7/TA82 ALGORITHM contents shall be as defined in table 12. 



Table 11: Contents of the case 10 TB7/TA82 ALGORITHM command 



Byte(s) 


Description 


Length 


1 


Record Numbor for GSKO 


1 


2 to 16 


SGCK 


15 


17 to 18 


GCK-VN 


2 



Response parameters/daia, case I , TAI 1/TA12 ALGORITHM contents shall be as defined in table 1 1 . 
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Table 11: Contents of the case 1, TA11/TA12 ALGORITHM response 



I Bytefs) 


Description 


Length 


! 1 to 4 


RES1 


4 



Sec EN 300 392-7 [41 for use of RES I and for size of ihe cryptographic parameters. 

Response parameters/data, case 2, TA2I/TA22 ALGORITHM contents shall be as denned in table 12. 

Table 12: Contents of the case 2, TA21/TA22 ALGORITHM response 



I Byte(s) 




Description 


j Length j 


I 1 to 4 


XRES2 







Response parameters/data, case 3, TB4/TE ALGORITHM contents shall be as defined in table 13. 



Table 13: Contents of the case 3, TB4/TE ALGORITHM response 



I Bvte(s) I 


Description 


Length 


| 1to10 |DCK 


10 



Response parameters/data, case 7 TA7 1 /IE ALGORITHM contents shall be as defined in table 14 
Table 14: Contents of the case 7 TA71H"E ALGORITHM response 

Response parameters/data: 



I Byte(s) 


Description 


Length I 


i 1 to 10 


MGCK 


10 I 



9.3 Definitions and coding 

The following definitions and coding are used in the response parameters/data of the commands. 

Coding: each byte is represented by bits b8 to bl, where b8 is the Most Significant Bit (MSB) and bl is the Least 
Significant Bit (LSB). In each representation the leftmost bit is the MSB. 

RFU: in a TETRA specific card all bytes which are RFU shall be set to "00" and RFU bits to 0. Where the TETRA 
application exists on a multi-application card or is built on a generic telecommunications card (e.g. TE9) then other 
values may apply. The values will be defined in the appropriate specifications for such cards. These bytes and bits s 
not be interpreted by an ME in a TETRA session. 

File status: refer to figure 1 . 



| b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 

1 



0 

1 



invalidated 
not invalidated 
RFU 

not readable or updatable when invalidated 
readable and updatable when invalidated 
RFU 



Figure 1: File status 
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Bit b3 may be set to I in special circumstances when it is required that the EF can be read and updated even if ihc EF is 
invalidated, e.g. reading and updating the EF ADN when the Fixed Dialling Number (FDN) feature is enabled. 

Structure of file: 



• "00" 


transparent; 


"01" 


linear fixed; 


"03" 


cyclic; 


• "II" 


key. 


Type of FUe: 




• M 00" 


RFU; 


• "01" 


MF; 


• "02" 


DF; 


"04" 


EF. 



Coding of PINs and UNBLOCK PINs: 

A PIN is coded on 8 bytes. Only (decimal) digits (0 to 9) shall be used, coded in ITU-T Recommendation T.50 [6] with 
bit 8 set to zero. The minimum number of digits is 4. If the number of digits presented by the user is less than 8 then the 
ME shall pad the presented PIN with "FF" before sending it to the SIM. 

The coding of the UNBLOCK PINs is identical to the coding of the PINs. However, the number of (decimal) digits is 
always 8. 

Coding of access conditions: 

The access conditions for the commands are coded on bytes 9, 1 0 and 1 1 of the response data of the SELECT command. 
Each condition is coded on 4 bits as shown in figure 2. 

Byte 9: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


hi 










I'll 



UPDATE 
"READ; SEEK 



Byte 10: 



b8 


b7 | b6 


b5 


b4 


b3 


b2 


bl 



RFU 
"RFU 



Byte 1 1 : 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



I I I 



INVALIDATE 
"REHABILITATE 



Figure 2: Access conditions 
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9.4 Status conditions returned by the card 

This clause specifics the coding of the stntus words SW I and SW2. 

9.4.1 Security management 

Security management contents shall be as defined in table 15. 



Table 15: Contents of the security management 



SW1 


SW2 


Error description 


"98* 


•60* 


manipulation flag set 


"98" 


"70* 


SwMI authentication unsuccessful 



9.4.2 Commands versus possible status responses 

Table 16 shows for each command the possible status conditions returned (marked by an asterisk *). 



Table 16: Commands and status words 





OK 


Mem 




Refer. 








Security 






Application 










Status 




Status 








status 






Independent 






































Errors 








9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


6 


6 


6 


6 


6 




0 


F 


2 


2 


4 


4 


4 


4 


8 


8 


8 


8 


8 


8 


8 


7 


B 


D 


E 


F 




0 


X 


0 


4 


0 


0 


0 


0 


0 


0 


0 


1 


4 


6 


7 


X 


X 


X 


X 


X 


Commands 


0 


X 


X 


0 


0 


2 


4 


8 


2 


4 


8 


0 


0 


0 


0 


X 


X 


X 


X 


X 


TA11/TAY2 Algorithm 










































TA21/TA22 Algorithm 










































TB4/TE Algorithm 






























* 












TA32 Algorithm 










































TA41/TA82 Algorithm 










































TA41/TA52 Algorithm 










































TA71/TE Algorithm 











































10 Contents of the EFs 
10.1 General on EFs 

This clause specifies the EFs for the TETRA session defining access conditions, data items and coding. A data item is a 
part of an EF which represents a complete logical entity, e.g. the alpha tag in an EF ADN record. 

EFs or data items having an unassigned value, or, which during the TETRA session, are cleared by the ME, shall have 
their bytes set to "FF. After the administrative phase all data items shall have a defined value or have their bytes set to 
" FF" . If a data item is "deleted" during a TETRA session by the allocation of a value specified in another TETRA TS, 
then this value shall be used, and ihc data item is not unassigned. 

EFs are mandatory (M) or optional (O). The file size of an optional EF may be zero. All implemented EFs with a file 
size greater than zero shall contain all mandatory data items. Optional data items may either be filled with "F\ or. if 
located at the end of an EF, need not exist. 

Using the command GET RESPONSE the ME can determine the length of variable length records (e.g. I to X). 
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NOTE: The field "Update activity** has only meaning to the card manufacturer to help choosing proper memory 
management for EFs. If an EF is updated very seldom, e.g. once during the administrative phase, it is set 
to "low". If an EF is updated or may be updated in every TETRA session it is set to "high". The actual 
update activity of certain EFs also depends on the system. Therefore the update activity of an EF is sol to 
high if it may be updated frequently in some systems. For example, high security systems may want io 
update cipher keys frequently, but less secure systems may update keys only when a particular reason to 
do it arises. 



1 0.2 Contents of the EFs at the MF level 

Contents of application independent files at the MF level shall be as specified in TS 102 221 [14]. 

1 0.3 Contents of the EFs at the TETRA application level 
10.3.1 EFsst (SIM Service Table) 

This EF shall indicate which of the optional services and EFs arc available as defined in table 1 7. 
NOTE: Having the presence of optional services indicated simplifies their handling for the ME. 



Table 17: Contents of the SIM service table EF 



Identifier: "SF0V | Structure: transparent 


I 


Mandatory 


File size: X bytes, X > 4 


Update activity: low 


Access Conditions: 

READ PIN1 
UPDATE ADM 
INVALIDATE ADM 
REHABILITATE ADM 


Bytes 


Descriplion 


M/O 


Lenqth 


1 


Services no. 1 to no. 8 


M 




2 


Services no. 9 to no. 16 


M 




3 


Services no. 1 7 to no. 24 


M 




4 


Services no. 25 to no. 32 


M 




5 


Services no. 33 to no. 40 


M 




6 


Services no. 41 to no. 48 


M 




etc. 


etc. 






X 


Service (8X-7) to (8X) 


O 


1 



Services: 

Contents: 



Service no.t: 


PINI disable function; 


Service no.2: 


ADNTETRA (Internal TETRA Phone Book) and Extension A; 


Service no.3: 


ADNGWT (External phones), Gateway Extension 1 and Gateway table; 


Service no.4: 


FDNTETRA and Extension B; 


Service no. 5: 


FDNGWT, Gateway Extcnsion2 and Gateway table; 


Service no.6: 


SDNTETRA; 


Service no.7: 


SDNGWT, Gateway Extension3 and Gateway table; 


Service no.8: 


LNDTETRA and Extension A: 


Service no.9: 


LNDGWT, Gateway Extension 1 and Gateway table; 
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Service no. 10: RFU; 

Service no. 11 : CCK and CCK location areas; 

Service no. 12: SCK; 

Service no. 13: GCK and MGCK; 

Service no. 1 4: Service Provider Name; 

Service no. 1 5 : Preferred Networks; 

Service no. 1 6: Uscrname: 

Service no. 17: Authentication; 

Service no. 18: OTAR; 

Service no. 19: RFU: 

Service no.20: Enhanced S 1M-ME security; 

Service no.2 1 : RFU; 

Service no.22: Status message texts; 

Service no.23: SDS1 message texts; 

Service no.24: SDS 123 Storage; 

Service no.25: SDS 4 Storage (including the SDS 4 message storage status); 

Service no.26: Call Modifiers; 

Service no.27: DMO channel information, MS allocation of DMO channels, DMO groups, 
DMO-TMO associations; 

Service no.28: List of key holders; 

Service no.29: DMO repeater and gateway list; 

Service no.30: SDS Parameters; 

Service no.3 1 : Default Status Target; 

Service no.32: SDS Delivery Report; 

Service no.33: RFU Service no.34: Preferred Location Area; 

Service no.35: Welcome Message; 

Service no.36: ADN (External phones), Extension 1 and Gateway table; 
Service no.37: FDN, Extension2 and Gateway table; 
Service no.3S: SDN, Extension3 and Gateway table; 
Service no.39: LND, Extension 1 and Gateway table; 
Service no.40: LNDCornp; 
Service no.4 1 : Private Number information; 
Service no.42: APN table; 
Service no. 43: Multi-Group feature. 
NOTE: Other services are possible in the future and will be coded on further bytes in the EF. 
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The coding falls under « he responsibility of ETSI. 
Coding shall be as defined in figure X 
I bii is used lo code each service: 
bit= I: service available 
bii = 0: service not available 



Byte 1: 



hi 



Service no. I 
Service no.2 
Service no.3 
" Service no.4 
" Service no.5 
* Service no.6 
" Service no.7 
Service no.8 



Byte 2: 



b7 



i i ' i 1 i I | Service no.9 
Service no. 10 
Service no.M 
Service no. 12 
Service no. 13 
Service no. 1 4 
" Service no. 1 5 
"Service no. 1 6 



Byte 3: 



Service no. 17 
Service no. 18 
Service no. 19 
Service no.20 
Service no.2 1 
Service no.22 
" Service no.23 
' Service no.24 



etc. 



F5gure 3: Coding of the SIM service table parameters 

.ofcod.noforthefirstbyteindicatingthatserviceno.l-PlN.-D.sabUng 

EXAMPLE: Figure 4 shows example of codm 0 
is available. 



Byte 1: 



bl 




xxx 



X x x 



Figure 4 Example of service coding BEST AVAILABLE COP^ 
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10 3 2 EF lTS i (Individual Tetra Subscriber Identity) 

readable or updaieable when invalidated. 

Table 18: Contents of Individual Tetra Subscriber Identity EF 



Identifier "6F02" 



Structure: transparent 



Update activity: low 



| Mandatory 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
ADM 
ADM 
NEV 




ITS1: 



Contents: 1TSI consists of Mob„e Country Code (MCQ, Mobi.c Network Code (MNC) and Individua. 
Short Subscriber Identity (ISS1). 



Coding shall be as defined in figure 5. 
Byte 1: 

b2 | bl 



b8 



b7 ) b6 1 b5 | b 4 



b3 



LSB of MCC address 



Byte 2: 



b8 1 b7 1 b6 I b5 \ b4 | b3 \ b2 \ b t ( 



MSB of MCC address 
LSB of MNC address 
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Byte 3: 



b8 



b7 



MSB of MNC address 



Byic 4: 



| b 8 \ b7 [ 



b6 



b5 



b4 I b3 I b2 | bfj 
— J ^ LSB of ISS1 



Byte 5: 



Nimh bit oflSSI 



Byte 6: 



[bgjbqg^wjbnm^] 



MSB oftSSI 



Figure 5: Coding of ITSI 

Xhe network address of the ITS. sha,. be used as the preferred network address. 
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1 0.3.3 EF,tsidis (ITSI Disabled) 

This EF shall indicate if the ITS1 is temporarily disabled as defined in table 19. 

Table 19: Contents of ITSI Disabled EP 



Identifier: "6F03" 



T 



Structure: transparent 



Rle size: 1 byte 



T 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
ADM 
ADM 
ADM 



Update activity: tow 



1 Mandatory 



Bytes 


Description 


M/O 


Length 


1 


Status 


M 


1 



Status: 

Contents: The status bit indicates the temporary disable staius of ITSI. 
Coding shall be as defined in figure 6. 
Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 Not temporarily disabled 

1 Temporarily disabled 
RFU 

RFU 

RFU 

RFU 

RFU 

RFU 

RFU 



Figure 6: Coding of status 

1 0.3.4 EFuname (Username) 

This EF may contain the alphanumeric name corresponding to the ITSI as defined in tabic 20. 

Table 20: Contents of Usemame EF 



Identilier "6F04" I 


Structure: transparent 


I 


Optional 


File si2e: 20 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 20 


Name 


M 


20 



BNSDOCID- <XP ZU5779A I > 
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Name: 



Contents: The common name of the card holder to be displayed. 

Coding: According to the default Mil alphabe. ISO/IEC 8859- 1 I9|. Unused byles shall be set as "FF\ 



10.3.5 EFsct (Subscriber Class Table) 



in up to 1 6 classes. 

The ITS. subscriber class may only be changed via the MM. by an authorized administrator or via the SwMl by the 
Network Operator or authored system manager. 



Table 21: Contents of Subscriber Class Table EF 



Identifier U 6F0S" 



Structure; transparent 



Mandatory 



Update activity: low 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
ADM 
ADM 
ADM 



Bytes 



Description 



Classes from 1 to 8_ 



Classes from 9 to 16 



Energy saving information 



M/O 



M 



Length 



Classes from I to 16: 

Coding shall be coded as defined in figure 7. 

Bit value 1 means that user is a member, value 0 that user is not a member. 
Byte 1: 

b2 | bl" 



| b8 | b7 | b6 



b5 



b4 



b3 



Class 1 
Class 2 
Class 3 
Class 4 
Class 5 
Class 6 
Class 7 
"Class 8 



Byic 2: 



bS 



bl 



b6 



b5 



b4 



b3 



bl 1 bl ] 



Class 9 
Class 10 
Class 1 1 
Class 12 
'Class 13 
"Class 14 
"Class 15 
"Class 16 



Figure 7: Coding of subscriber classes gggj AVAILABLE COP 
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Energy Saving Information: 

Contents: Indicates which energy saving scheme (if any) is in operation and the starling point of the 
energy economy mode. 

Coding: As per EN 300 392-2 [3) (14 bits) with b8 and b7 of first byte RFU. 

10.3.6 EFrhase (Phase identification) 

This EF contains information concerning the phase of the SIM as defined in table 22. 

Table 22: Contents of the Phase identification EF 



Identifier: "6F06" 


I Structure: transparent 


| 


Mandatory 


File size: 1 byte 


t 


Update activity: low ! 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


ALW 
ADM 
ADM 
ADM 








Bytes 


r Description 


M/O 


Length 


1 


SIM Phase 


M 


1 byte 



SIM Phase shall be indicated as defined in figure 8. 

Coding: 
'Byte \: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


b) 



0 
0 
0 

0 

I 
t 
I 
1 



0 
0 

1 
I 

0 
0 

1 
1 



0 

1 

0 

1 

0 

I 

0 

I 



Indicates support of ETS 300 812 Edition I 

I ndicates support of EN 300812 V2.1.I 

Indicates support of TS 100 812-2 V2.2.I and 

ES 200 812-2 V2.2.2 

EN 300 812-3 the present version 

TS 100 812-2 and ES 200 812-2 present version 

RFU 

RFU 

RFU 

RFU 



Figure 8: Coding of SIM phase 

All other codings axe reserved for specification by ETSI. 
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1 0.3.7 EFcck (Common Cipher Key) 

This EF shall contain common cipher key as defined in table 23. This EF shall contain 2 records. 

Table 23: Contents of Common Cipher Key EF 



Identifier: '6F07* 



Structure: linear fixed 



Optional 



Record size: 12 bytes 



Update activity: high 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 

NEV (see note) 

NEV 

NEV 



Bytes, 
1 to 2 



3 to 12 



Description 



CCK-id 



Common cipher key CCK 



M/O 



M 
M 



length 



•vice ?0 is set (Enhanced ^iM-tvin &ciuiuy; ^ *.m.«..~~ _.™~, 

> sea) the record with Enhanced Security Key (KE) before sending it to the ME. 



NOTE: This EF is updated using the TA32 algorithm on the SIM. 
If SIM Service 20 is set (Enhanced SIM-ME security) th, enhanced security algorithm TE shall be automatically run by 
the SIM to ! 

CCK-id: 

Contents: Common cipher key identity. 
• Coding shall be as defined in figure 9: 
Byte I : 

b6 | b5 



b8 



b7 



b4 



b3 b2 



bl 



\ LSB of CCK-id 



Byte 2: 



b8 



| b7 I b6 | b5 { b4 | b3 [ b2 | b l | 



MSB of CCK-id 



Figure 9: Coding of CCK-id 

Common Cipher Key (CCK): 
Contents: CCK. 

Coding: CCK shall be coded in 10 bytes according to figure 10. 
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Byie 3: 



b8 


b7 | b6 


b5 


b4 


b3 | b2 


bl 



LSB of CCK 



etc. 

Byte 1 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 | bi 



MSB ofCOC 



Figure 1 0: Coding of CCK 

1 0.3.8 EFcckloc (CCK location areas) 

This EF shall contain the location aiea(s) the CCK is valid as defined in table 24. 

Table 24: Contents of CCK location areas EF 



Identifier "6F08" 



Structure: transparent 



Optional 



File size: 32 bytes 



Update activity: high 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
PIN1 
ADM 
ADM 



Bytes 



Description 



Type 



2 to 32 iLocation area information 



M/O 
M 



Length 
1 



31 



Type: 



Contents: defines the structure of the location area information. 

Coding: shall be binary coded from 0 to 4 as defined in figure 1 1 . (See also EN 300 392-7 [4]). 



■5»cW r n<XP 0345779A l> 



ETSI 



33 



ETSITS 100 812-2 V2.3.U2003-10) 



Byte I 




Figure 1V. Location type 

. Location area Information 

i_ i i m where the CCK-ID is valid 

— — ■ 

1 Type M: oof*c o to ^2 arc RFU. 

is » « **. - « - - — 

1 TyPe01 ' , ■„ of LA-.Dis pro."..*. H- ««««• " - 



BES T WW^ 
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Byte 3: 

| M | b7 | b6 | hfi | M I b3 W j dH 



LSB oflocaiion area 



Byte 4: 



b8 



b7 



b6 



b5 



b4 



b3 



b2 



bl 



MSB oflocaiion area 
*RFU 

"rfu 



Figure 12: Coding ol location area 

mask mechanism is intended to find if the CCK applies to the current LA. 
bit mask shall be coded as defined in figure 1 3. 



Type 10: 

In that case the LA selector and 
Coding: 

Bytes 2 to 3: Location area 
Byte 2: 

[hS 1 b7 1 b6 I b5 I b4 1 b3 | b2 | bT\ 

1 . . 1 ■ * ■ 1 « 1 | 1 | 1 I i LSB of location area bit mask 



Byte 3: 



j b8 | b7 | b 6 



b5 



b4 



j>3 | b2 1 bj ] 



MSB of location area bit mask 
RFU 
"RFU 



Figure 13: Location area bit mask 
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Ja sclecior shall be coded as defined in figure 14. 



Byies 4 10 5: Location area: 
Byte 4: 

[^WH^T^^ LSBofloca.ionarease.ec.or 



Byte 5: 



MSB oflocation area selector 

RFU 

RFU 



Figure 14: Location area selector 

Bylcs6to32areRFU. 
Type 11: 

,„ „ case , «» E « or LA WK b «- — *• " *» 



Bytes 2 to 3: Low location area value shall 



be coded as defined in figure 15. 
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Byte 2: 



n 



of low location area 



Byte 3: 



bS 



b7 



b6 



b5 



Mjb3jb2jbJ 



' MSB of low location area 
"RFU 

"rfu 



' Bytes 4 to 5: High location area value 
Byte 4: 



Figure 15: Low location area 

shall be encoded as defined in figure 16. 



LSB of high location area 



Byte 5: 



b7 



b6 



bS |b4|b3| b2 1 b H 



MSB of high location area 
'RFU 

"rfu 



Figure 16: High location area 



ETSl 



37 



ETSI TS 100 812-2 V2.3.1 (2003-10) 



1 0.3 9 EFsck (Static Cipher Keys) 

This EF shall contain information as defined in table 25 and can contain up to 32 records. 

Table 25: Contents of Static Cipher Keys EF 




Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PJN1 

NEV (see note) 

NEV 

NEV 



JSytes 



Description 



Static Cipher Key Version Number 



Static Cipher Key 



M/O 



M 



M 



Length 



NOTE: This EF is updated using the TA4 1/52 algorithms on the SIM. 
If SIM Service 20 is set (Enhanced SIM-ME security) the enhanced security algorithm TE shall be automatically run by 
L SIM to seal the record with Enhanced Security Key (KE) before sendmg .1 to the ME. 

Static Cipher Key Version Number: 

Contents: The Static Cipher Key Version Number. 
. Coding: The Static Cipher Key Version Number shall be coded according to figure 17. 

Byte 1 : 

b5 | b4 | bT 



[b8 



b7 



b6 



b2 



bl 



LSBofSCK-VN 



Byte 2: 



b8 



b7 



b6 



b5 



b4 



b3 | b2 | bl 



1 MSB of SCK-VN 

Figure 17: Coding of Static Cipher Key Version Number 

Sialic Cipher Key: 

Contents: The Sialic Cipher Key. 

Coding: The Sialic Cipher Key is coded in 10 bytes according to figure 18. 

BEST AVAILABLE COP 
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Byic 3: 



b8 


b7 


b6 | bS 


b4 


b3 


b2 


b.| 



LSB ofSCK 



etc. 

Bylc 1 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB ofSCK 



Figure 1 8: Coding of Static Cipher Key 

10.3.10 EFqssis (Static GSSIs) 

This EF shall contain ihe pre-programmed (by the operator or organization) group identities as defined in table 26. 

Table 26: Contents of Static GSSIs EF 



Mpntifi*r -fiFOA 4 I Structure: linear fixed 


I 


Mandatory 


p^nrri tenqth- X + 6 bytes I Update activity: tow 


Access Conditions: 






READ 


PIN1 






UPDATE ADM 






INVALIDATE ADM 






REHABILITATE ADM 






Bytes 


Description 


M/O 


Lenqth 


1 toX 


Group name 


M 


X 


X+ 1 


Network address record number 


M 


1 


X + 2 to X + 4 


Group Identity (GSS!) 


M 


3 


X + 5 


Parent Raq 


M 


1 


X + 6 


Parent Talk Group Index 


M 


1 



Croup name: 

Contents: Alphanumeric names for the static groups stored on the SIM. 
Coding: The value of X may range from zero to 251. 
Network address record number: 

Contents: Record number of the corresponding network address. Network addresses are stored in 
ef N\vt- 
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Coding: binary. Free records are indicated by NULL value ("00"). 
Group Identity (GSSI): 

Contents: The short subscriber identity for the group. 
Coding: Length of the GSSI shall be 24 bits as defined in figure 19. 
Byte X + 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



LSB of GSSI 



Byte X + 3: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



9 th bit of GSSI 



Byte X + 4: 



b8 


b7 


b6 


b5 


b4 | b3 


b2 


bl 



MSB of GSSI 



Figure 19: Coding of Group Identity 

Parent Rag: 

Contents: Flag indicating if the group has a parent group. 
Coding: 

0- no parent, 
I - has a parent. 
Parent Talk Group Index: 

Contents: The index of the parent group (the record number in the EF CSS|S file. 
Coding: shall be binary. 
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10.3.1 1 EFgrds (Group related data for static GSSls) 

This EF shall contain information related to each static GSSI as defined in table 27. There shall be a 1:1 relationship 
between each record in EF CRDS and the corresponding record in EF CSSIS . 



Table 27: Contents of Group related data for static GSSls EF 



Identifier. "6F0B* 1 


Structure: linear fixed 


I 


Mandatory 


Record size: 2 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Key record number 


M 


1 


2 


Group related data 


M 


1 



• Key record number: 

Contents: Class 2 systems record number of the corresponding SCK in the EF SCK -filc. 

Contents: Class 3 systems record number of the corresponding GCK in the EF CCK -file. 

Coding: binary. In class 2 systems if there is no SCK defined for this group, key record number shall be 
NULL value ("00"). 

Coding: binary. In class 3 systems if there is no GCK defined for this group, key record number shall be 
NULL value ("00"). 

• Group related data: 

Contents: 

Group Identity lifetime (2 bits): Shall indicate the attachment lifetime of the group identity as defined in 
table 28 copied from EN 300 392-2 [3], clause 1 6. 1 0. 1 6. 

Class of usage (3 bits). Shall indicate the importance of the group for the user and define the participation 
rules for the groups defined with Class of usage. (EN 300 392-2 [3] and ETS 300 392-12-22 (8]). 

Permanent Detachment Flag ( 1 bit). Shall indicate that whether a group identity was permanent detached 
bytheSwMI. 

MS user is allowed to request an attachment (I bit): Shall indicate whether MS user is allowed to request 
an attachment. 



Table 28: Group identity attachment lifetime 



Information element 


Length 


Value 


Remark 


Group Identity Lifetime 


2 


00 


attachment not needed 


01 


attachment for next ITSI attach required 


10 


attachment not allowed for next ITSI attach 


11 


attachment for next location update required 



Coding: shall be as defined in figure 15. 
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b8 


b7 


h6 | b5 


b4 


b3 


b2 


bl 



Permanent Dciachment Hag (t - permanent detachment) 

Lifetime bit t 

Lifetime bit 2 

Class of usage bit I 

Class of usage bit 2 

Class of usage bit 3 

MS user is allowed to request an attachment 
RFU 



Figure 20: Coding of Group related data 



10.3.12 EFqssid (Dynamic GSSIs) 

Tlits EF shall contain the dynamic group identities as defined in table 29. 



Table 29: Content of Dynamic GSSIs EF 

Identifier: '6F0C* | Structure; linear fixed | Mandatory 

Record length: X + 4 bytes | Update activity: low 

Access Conditions: 

READ PIN1 

UPDATE ADM 

INVALIDATE ADM 

*' REHABILITATE NEV 



Bytes 


Description 


M/O 


Length 


1 toX 


Group name 


M 


X 


X + 1 


Network address record number 


M 


1 


X + 2 to X +• 4 


Group Identity (GSSI) 


M 


3 



See EF GSS|S (Static CSSIs) for contents and coding. 



10.3.13 EFgrdd (Group related data for dynamic GSSIs) 

This EF shall contain information related to each dynamic GSSI as defined in table 30. There shall be a 1:1 relationship 
between each record in EF GRDD and the corresponding record in EF CSS|D . 



Table 30: Contents of Group related data for dynamic GSSIs EF 



Identifier: # 6F0D" | 


Structure: linear fixed 


I 


Mandatory 


Record size: 3 bytes 


1 


Update activity: low 


Access Condilions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Key record number 


M 


1 


2 to 3 


Group related data 


M 


2 



See EF GRDS for contents and coding. 
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10.3.14 EFqck (Group Cipher Keys) 

This EF shall contain the group cipher keys associated with the ■^ r to ^^ i l? , * 3 1 ' ^ * ' 
l:u5ationship between each MGCK in EF MCCK and the corresponding record of GCK m EF GCK . 

Table 31: Contents of Group Cipher Keys EF 

I Structure: linear fixed" 



Identifier: "6F0E' 



Record length: 26 bytes 



Update activity: high 



Optional 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



NEV (see notet) 
NEV (see note 2) 
ADM 
ADM 



Bytes 
1 to 2 



3 to 4 
5 to 14 



15 to 16 



17 to 26 



Description 



GCKN 



GCK-VN 



GCK 



GCK-VN 



GCK 



M/O 



M 
M 



M 
M 



M 



Length 
2 



2 
10 



2 
10 



TiTS-TP r. Thflm iq no access to this EF over the SIM-ME interface. 
SI 2 : GCK and IttSS I are updated on the SIM by use of the TA41/TA82 a.gon,hm. 
NOTE 3: A record is tree it no (static or dynamic) GSSI points to it. _ 



GCKN: 



- Contents: The Group Cipher Key Number is the identif.er for a GCK used to associate it to one or more 
groups. 

Coding: shall be coded as defined in figure 21- 
Byte 1: 



b8 


b7 | b6 


b5 


b4 


b3 


b2 


bl 



1 LSB of GCKN 



Byte 2: 



b8 



b7 \ b6 



b5 



b3 



b2 



13 



MSB of GCKN 



Figure 21 : Coding o1 GCKN 
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GCK-VN: 

Conienis: Group Cipher key Version Number. 

Coding: 

Bytes 3 and 15: 



b8 



H7 



h6 | b5 1 b4 



b3 



b2 



3 



LSB of GCK-VN 



Bytes 4 and 16: 



b8 


b7 


b6 


b5 


W 


b3 


b2 


bl 



MSB of GCK-VN 



GCK: 



Contents: The Group Cipher Keys. 

Coding: The key shall be stored in 10 bytes according to figure 22. 



BEST AVAILABLE COPY 
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Bytes 5 and 17: 



b8 


b7 


b6 


b5 


b4 


b3 







LSBofGCK 



etc. 

Bytes 14 and 26: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB ofGCK 



Figure 22: Coding of GCK 



10.3.15 Void 



10.3.16 EFqinfo (User's group information) 

This EF shall contain the user's last active group, user's preferred group and information about using these group 
addresses as defined in table 32. 

Table 32: Contents of User's group information EF 



Identifier: "6F10" 



File size: 9 bytes 



Structure: transparent 



T 



Update activity: high 



Mandatory 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
PIN1 
ADM 
ADM 



Bytes 


Description 


M/O 


Length 


1 


Usage information 


M 


1 


2 to 3 


Last TMO active group 


M 


2 


4 


Last DMO active Group 


M 


1 


5 to 6 


TMO user's preferred group 


M 


2 


7 


DMO user's preferred group 


I M 


1 


8 


Last selected scan list 


M 


1 


9 


Scan on/off 


M 


1 
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Usage information: indicate the use of addresses, h is common to TMO and DMO. 
Coding: shall be coded as defined in figure 23. 
Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



IT 

0 0 No group address to be used 

0 l Last group address to be used 

1 0 Preferred group address to be used 
I l RFU 

RFU 

RFU 

RFU 

RFU 

RFU 

RFU 



Figure 23: Coding of Usage information 

Last TMO active group: Shall indicate the record number of the corresponding TMO group in EF< 



EF 



GSSIS or 



CSSID. 
Coding: 
Byte 2: 

CSSIS_GSSID_nag: I - from EF GSSIS 
0-from EF GSSID 

Byte 3: Coded binary - Indicate the record number of the corresponding TMO group in EF C 
Last DMO active group : Shall indicate the record number of the corresponding DMO group in EF DMO CSS)S 
Coding: 

Byte 4: Coded binary - Indicate the record number of the corresponding DMO Group in EF DMO CSSiS . 

TMO user's preferred group: Shall indicate the record number of the corresponding TMO group in EF^g^^ 
EF GSSlD. 



7 GSSISor EF CSSID. 



Coding: the TMO user's preferred group shall be coded as presented in figure 24. 
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Byte 5: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 



bl 



0 From ef gssid 



I From ef, 



GSSIS 



RFU 
RFU 
"RFU 
"RFU 
"RFU 

"rfu 
"rfu 



Byte 6: Coded binary - Indicate ihc record number of the corresponding TMO group in EF GSS1S or EF CSSID 

Figure 24: TMO user's preferred group 
DMO user's preferred group : Shall indicaie the record number of the corresponding DMO group in 



EF DMCLGSS1S. 
Coding: 

Byte 7: Coded binary - Indicate the record number of the corresponding DMO Group in EF DMO _ GSSJS . 
Last Selected Scan List: Shall indicate the record number of the scan list in EF SCAN . 
Coding: 

Byte 8: Coded binary - Indicate the record number of the corresponding Scan list in EF SCAN 
Scan on/off: Shall indicated scanning state. 

Coding: the scan on/off shall be coded as presented in table 25. 

Byte 9: 



L 



b8 



b7 b6 



b5 



b4 



b3 



b2 



bl 



0 Scan Off 

1 Scan On 

RFU 

RFU 

RFU 

RFU 

RFU 

RFU 

RFU 



Figure 25: Scanning on/off 
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10.3.17 EF sec (Security settings) 

This EF shall indicate the values for the security settings as defined in table 33. 



Table 33: Contents of Security settings EF 



Identifier "6F11" [ 


Structure: transparent 


I 


Mandatory 


File size: 1 byte 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Lenqth 


1 


Security settings 


M 


1 



Security settings: 

Contents: indicates whether the SIM requests a mutual authentication when it is authenticated by the 
SwMl. or whether the SIM requests authentication and the security class. 

Coding: shall be coded as defined in figure 26. 

Byte I : 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 Mutual authentication not required 

1 Mutual authentication required 

0 Authentication not required 

1 Authentication required 
0 0 Security Class 1 

0 1 Security Class 2 

1 0 Security Class 3 

I 1 Security Class 2 and 3 
RFU 



Figure 26: Coding of Security settings 

10.3.18 s EFpoRBiD (Forbidden networks) 

This EF shall contain the Forbidden networks as defined in table 34. It is read by the ME as part of the SIM 
initialization procedure and indicates networks which the MS shall not automatically attempt to access. 

A network address is written to the EF if a network rejects a Location Update with the following causes "Illegal MS" 
and "Migration not supported" as in EN 300 392-2 [3]. The ME shall update the list by using the "next" mode of the 
update record command. 

NOTE I : By using the "next'' mode in update operations the oldest record will be overwritten in the case the file is 
full. 

NOTE 2: This EF should have at least as many records as is the expected amount of forbidden networks. Otherwise 
the ME may find the same forbidden networks in the beginning of every TETRA session and rewrite 
them to the list. 
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Table 34: Contents of Forbidden networks EF 



Identifier *6F1 2" [ 


Structure: eye 


lie 


1 


Mandatory 


Record tenqtn: 3 bvtes 


I Y 


Update activity: low 


Access Conditk 
READ 
UPDATI 
INVALIC 
REHAB 


>ns: 
E 

)ATE 
LITATE 


PIN1 
PIN1 
ADM 
ADM 








! Bytes 


Description 


M/O 


Length 


1 to 3 


Network address i 


M 


3 



Network address: 

Contents: The address consists of MCC and MNC addresses, 10 and 14 bits respectively. 
Coding: shall be coded as defined in figure 27. Empty records shall be set to "FF". 
Byte J : 



b8 


b7 


b6 


b5 b4 


b3 


b2 


bl 



LSB of MCC address 



Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 | bl 



MSB of MCC address 
"LSB of MNC address 



Byte 3: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of MNC address 



Figure 27: Coding of Network address 
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1 0.3. 1 9 EFp REF (Preferred networks) 

This EF shall comain a list of preferred network addresses as defined in table 35. The networks arc listed in the order of 
preference. The first record corresponds to ihe highest preference. 



Table 35: Contents of Preferred networks EF 



Identifier "6F13' | 


Structure: linear fixed 


I 


Optional 


Record lenqth: 3 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 3 


Network address 


M 


3 



Network address: 

Contents: The address consists of MCC and MNC addresses, 10 and 14 bits respectively. 
Coding: shall be coded as defined in figure 28. Empty records shall be set to "FF\ 
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Byte I: 



b8 


» 


b6 


b5 | b4 


b3 | b2 


bl 



Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3|b2 


bl 



Byte 3: 



LSB ofMCC address 



MSB ofMCC address 
LSB ofMNC address 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


u 



MSB of MNC address 



Figure 28: Coding of network address 

10.3.20 EFspn (Service Provider Name) 

This EF shall contain the service provider name and appropriate requirements for the display by the ME as defined in 
table 36. 

Table 36: Contents of Service Provider Name EF 



Identifier '6F14 - | 


Structure: transparent 


I 


Optional 


File size: 1 7 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


ALW 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Display Condition 


M 


1 


2 to 17 


Service Provider Name 


M 


16 
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Display condition: 

Contents: Display condition for the service provider name in respect to the network. 
Coding: shall be as defined in figure 29. 
Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 Display of registered network not required 

1 Display of registered network required 
RFU 



Figure 29: Coding of Display condition 

Service provider name: 

Contents: Service provider string to be displayed. 

Coding: The string shall use the default 8-bit alphabet ISO/IEC 8859- 1 [9|. The string shall be left 
justified. Unused bytes shall be set to "FF\ 

10.3.21 Void 

10.3.22 EFqnvvrk (Broadcast network information) 

This EF shall contain information concerning the D-N WRK-BROADCAST according to EN 300 392-2 [3] as defined 
in table 37. It shall contain 32 records (see EN 300 392-2 [3]). 

Storage of neighbour cell information may reduce the extent of a MS's search for MCCH earners when selecting a cell. 
Table 37: Contents of Broadcast network information EF 



Identifier: "6F16" | 


Structure: linear fixed 


t 


Mandatory 


Record size: 3 bytes 


I 


Update activity: hiqh 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Lenqth 


1 to 3 


MCCH information 


M 


3 bytes 



MCCH information: 

Coding: The information shall be coded as defined in EN 300 392-2 [3] and presented in figure 30. Free 
record shall be indicated in bit 7 of byte 3. 
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Byie l : 



b8 


b7 


b6 


b5 | b4 


b3 | b2 


bl 



LSB of Main carrier 



Byie 2: 



b8 | b7 [ b6 b5 b4 | b3 b2 bl 



MSB of Main carrier 
LSB of Frequency band 



" MSB of Frequency band 



Byte 3: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 | bl 



MSB of Offset 

LSB of Duplex spacing 

MSB of Duplex spacing 
Reverse operation 
Free record indicator: 
~0 = record in use, 1 = record not in use 
RFU 



Figure 30: Coding of MCCH information 



10.3.23 EF N wt (Network table) 

This EF shall contain the network part of the TETRA addresses as defined in table 38. These addresses are used and 
updated by several EFs (EF GSSKS , EF CSS1D , EF GINFO , EF GWT , EF ADNTETRA , EF SDNTETRA> EF FDNTETRA> and 
EF, W nT«m, a) The records in these files make reference to particular network address records in this file using the 
record number of the network address. 
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Table 38: Contents of Network table EF 



Identifier: "6F17* j 


Structure: linear fixed 


I 


Mandatory 


Record size: 5 bytes 


! Update activity: hiah 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 






Bytes 


Description 


M/O 


Lenqth 


1 to 3 


Network address (MCC and MNC) 


M 


3 


4 to 5 


Record pointer counter 


M 


2 



Network address: 

Contents: The address consists of MCC and MNC addresses. 10 and 14 bits respectively. The user's 
home address (from ITSI) is stored as the first record of the file. 

Coding: shall be as defined in figure 31. 
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Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bi 



LSB of MCC address 



Byte! 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of MCC address 
LSB ofMNC address 



Byte 3: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB ofMNC address 



Figure 31 : Network address 



Record pointer counter: 



Contents: The records in this file can be referenced from several other files. This counter is incremented 
each time a new reference to a record is created. Also when the reference is deleted, this counter should 
be decremented. 

Coding: Binary. NULL value ("00") indicates a free record. 
NOTE: This file is updated by the ME when updating EFs which reference this file. 
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10.3.24 EFqwt (Gateway table) 

This EF shall contain the names and addresses for gateways in a TETRA nciwork e.g. Private Automalic Branch 
Exchange (PABX) as defined in table 38 and Public Switched Telephone Network (PSTN). This file is referenced by 
EF ADNGWT- EF FDNGWT* EFlndcwt> ef sdngw*p ef aDN» EE FDN» EF LND and EF SDN« Tne fi ,es reference to this file 
using the record number of gateway names and addresses on this file. 

NOTE: This implementation requires thai there is one universally acknowledged TETRA address for PSTN 
gateways in all different networks. 

Table 39: Contents of Gateway table EF 

Identifier. "6F 18* | Structure: linear fixed ] Optional 

Record size: 14 bytes | Update activity: high 

Access Conditions: 

READ PIN1 

UPDATE ADM 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Description 


WO 


Length 


1 to 8 


Name 


M 


8 


9 


Network address record number 


M 


1 


10to 12 


SSI of the gateway 


M 


3 


13 


Type 


M 


1 


14 


RFU 


M 


1 



The name and address of the PSTN gateway is stored as the first record of the file. 

Name: 

Contents: The alphanumeric name for the corresponding gateway. 

Coding: The string shall use the default 8-bit alphabet, refer to ISO/IEC 8859-1 [9]. The string shall be 
left justified. Unused bytes shall be set to "FF\ 

Network address record number: 

Contents: Record number of the corresponding network address in EF NWT . 

Coding: binary. 
SSIt>f the Gateway: 

ContenLs: The short subscriber identity of the gateway used. 

Coding: Length of the SSI shall be 24 bits and coded as defined in figure 32. 
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Byie 10: 
1 bS 1 b7 | b6 



b5 



b4 



b3 



b2 



bl 



LSB of SSI 



Byie 11: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



L 9 th bit of SSI 



Byie 12: 



fb8 



b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of SSI 



Figure 32: Coding of gateway SSI 



Type: 



Contents: The type of gateway. 

Coding: shall be coded as defined in figure 33. 

Byte 13: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 0 Gateway not defined 

0 I PSTN gateway 

1 0 PABX gateway 
1 I Private gateway 

Reserved for operator specific gateways 

RFU 



Figure 33: Coding of type of gateway 
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RFU: 

Contents: RFU. 
Coding: "FF. 

1 0.3.25 EFcmt (Call Modifier Table) 

This EF shall indicate the values for the call modifiers required by the ME on a per call basis as defined in table 40. 
These are intended to provide a sensible set of call modifiers for use where the user does not, or cannot, enter them 
during call set-up. It is proposed that there are different sets of modifiers for different types of calls and that these sets 
are selected by the ME according to the call type. Alternatively, the ME may allow the user to select a set of call 
modifiers via the MM I. The alphanumeric field is intended to assist the user in selecting a proper call modifier. 

To allow default values to be defined on subscription for each of the call types, the first 12 entries in the table are 
designated for particular call types in fixed positions. The user may add more call modifiers after the first 12 entries. 

Each record in phonebooks may refer to a call modifier in this EF. 



Table 40: Contents of Call Modifier Table 



Identifier: "6F19" 




! Structure: linear fixed 


I 


Optional 


Record lenqth: X + 


4 bytes j Update activity: low 


Access Conditions: 










READ 






PIN1 






UPDATE 




PIN1/PIN2 (see note) 






INVALIDATE 




ADM 






REHABILITATE 




ADM 






'Bytes 


Description 


M/O 


Length 


| 1 toX 


Name 


M 


X 


X + 1 to X + 4 


Call modifiers 


M 


4 


NOTE: Card issuer will choose between PIN1 or PIN2 protection. 



Name: 

Contents: An alphanumeric identifier for the set of call modifier values. 

Coding: According to the default 8-bit alphabet ISO/IEC 8859-1 [9]. A free record is indicated by filling 
this field with "FF". 

Call modifiers: 

Contents: The file consists of the following pieces of information: 

Area selection 4 bits; 

Call priority 4 bits: 

Hook method selection 1 bit; 

Simplex/duplex selection I bit; 

End-to-end encryption 1 bit; 

Basic service information 16 bits. 
Coding: The first 1 1 bits shall be coded into four bytes as defined in figure 34. 
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Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



Byte 2: 



[ _Area selection 



Area selection 
Call priority 



Call priority 



b8 


bl 


b6 


b5 


b4 


b3 


b2 


bl 



Hook method selection 
Simplex/duplex selection 
End-to-end encryption 
RFU 



RFU 



Figure 34: Coding of call modifier bytes 1 and 2 

Bytes 3 and 4 shall be coded as "basic service information" in EN 300 392-2 [3J. 
Fixed call modifier sets: 

the default call modifier sets shall be placed in EF CMT in a standard order as defined in table 4 1 to allow 
selection of the set by call type. 

Table 41 : Contents of fixed call modifier set 



Record in EF CMT 


Call Type 


Calt features 


Record 1 


Voice call 


Intra-TETRA, individual call 


Record 2 


Voice call 


Intra-TETRA, group call 


Record 3 i 


Voice call 


Intra-TETRA, acknowledged group 
call 


Record 4 


Voice call 


Intra-TETRA, broadcast call 


Record 5 


Voice call 


PABX call 


Record 6 


Voice call 


PSTN call 


Record 7 


Circuit mode data call 


Intra-TETRA, individual call 


Record 8 


Circuit mode data call 


Intra-TETRA. group call 


Record 9 


Circuit mode data call 


Intra-TETRA, acknowledged group 
call 


Record 10 


Circuit mode data call 


Intra-TETRA, broadcast call 


Record 1 1 


Circuit mode data call 


PABX call 


Record 12 


Circuit mode data call 


PSTN call 



NOTE: This EF references EN 300 392-2 [3]. 
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10.3.26 EFadngwt (Abbreviated Dialling Number with Gateways) 

This EF shall contain ADNs as defined in table 42. In addition it contains record numbers of the associated gateway 
call modifier and gateway extension records. 

NOTE: When calling to phone numbers contained in this EF from within a TETRA network, the gateway address 
is sent with the dialled number. 



Table 42: Contents of Abbreviated Dialling Number with Gateways EF 



Identifier: "6F1A" | 


Structure: linear fixed 


} 


Optional 


Record length: X + 12 bytes 


I 


Update activity: low 


Access Condition 
READ 
UPDATE 
INVALID/* 
REHABIL 


s: 

iTE 
TATE 


P1N1 
PIN1 
PIN2 
PIN2 








Bytes 


Description 


M/O 


Lenqth 


1 to X 


Name 


o 


X 


X+ 1 


Length of number contents 


M 


1 


X + 2 to X + 9 


Dialling number 


M 


8 


X+ 10 


Gateway address record number 


M 


1 


X+ 11 


Call modifier record number 


M 


1 


X+ 12 


Gateway Extensionl record number 


M 


1 



Name: 

Contents: The alphanumeric name the user has assigned for corresponding dialling number. 
Coding: According to the default 8-bit alphabet 1SO/IEC 8859- 1 [9]. 
f. - Length of number contents: 

Contents: this field gives the number of digits of the following "number" field containing an actual BCD 
number. This means that the maximum value is 16. even when the actual ADN length is greater than 
16 digits. When an ADN requires more than 16 digits it is indicated by the Gateway Extension 1 record 
number being unequal to "FF'\ The remainder is stored in the EF GWTEXT , with the remaining length of 
the overflow data being coded in the appropriate overflow record itself (see clause 10.3.27). 

Coding: binary. NULL ("00") value indicates a free record. 

DiaWing number: 

Contents: up to 16 digits of the number. 

Coding: shall be according to EN 300 392-2 [3] and as defined in figure 35. if the dialling number is 
longer than 16 digits, the first 16 digits are stored in this data item and the overflow data is stored in an 
associated record in the EF GWT£XTl . The record is identified by the Gateway Extension I record number. 
If ADN requires less than 16 digits, excess nibbles at the end of the data item shall be ignored. 
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bS 



b7 


b6 


bS 


b4 


b3 


b2 


bl 



LSB of Digit I 



MSB of Digit 1 
"LSB of Digit 2 



MSB of Digit 2 



Byte X + 3: 



b& 


b7 


b6 


b5 


b4 


b3 


b2 


bi 



\ {_ LSB of Digit 3 

I MSB of Digit 3 

I LSB of Digit 4 

MSB of Digit 4 

etc. 

Figure 35: Coding of dialled number 

Gateway address record number: 

Contents: This byte identifies the number of a record in the EF GWT containing an associated gateway 
address. The use of this byte is optional. If it is not used it shall be set to "FP. 

Coding: binary. 

Call modifier record number: 

Contents: This byte identifies the number of a record in the EF CMT containing an associated call modifier 
information. The use of this byte is optional. If it is not used it shall be set to M FF\ 

Coding: binary. 

Gateway Extension 1 record number: 

Contents: This byte identifies the number of a record in the EF GWTEXT| containing an associated ADN 
overflow. The use of this byte is optional. If it is not used it shall be set to "FF\ 

Coding: binary. 
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10.3.27 EFqwtexti (Gateway Extension 1) 

This EF shall contain extension data of an ADNGWT or Last Number Dialled with gateway (LNDGWT) as defined ii 
table 43. Extension data is caused by an ADNGWT or LNDGWT which is greater than the 16 digil capacity of the 
ADNGWT or LNDGWT EF. The remainder is stored in this EF as a record, which is identified by a specified 
identification byte inside the ADNGWT or LNDGWT EF. 



Table 43: Contents of Gateway Extension 1 EF 



Identifier: *6F1B M ! 


Structure: linear fixed 


I 


Optional 


Record lenqth: 13 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Record Type 


M 


1 


2 to 12 


Extension data 


M 


11 


13 


Identifier 


M 


1 



For contents and coding as defined in TS I00 977 [5]. 

1 0.3.28 EFadntetra (Abbreviated dialling numbers for TETRA network) 

This EF shall contain the phone numbers that are used when calling to a TETRA phone as defined in table 44. The 
access strings for. Supplementary services are stored in the same file. 



Table 44: Contents of Abbreviated dialling numbers for TETRA network EF 



Identifier "6F1C | 


Structure: linear fixed 


I 


Optional 


Record length: X + 7 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
P1N1 
PIN2 
PIN2 








Bytes 


Description 


M/O 


Lenqth 


1 


Type 


M 


1 


2 to X + 1 


Name 


M 


X 


X + 2 


Network address record number 


M 


1 


X + 3 to X + 5 


TETRA address or Supplementary service 
access strinq 


M 


3 


X + 6 


Call modifier record number 


M 


1 


X + 7 


Extension A record number 


M 


1 



- Type: 

Contents: One byte indicator to identify the entry type TETRA address or Supplementary service access 
siring field. 

Coding: shall be as defined in figure 36. 
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b8 | b7 


b6 


b5 


b4 


b3 


b2 


bl 



IT 

0 0 
0 I 



TETRA address 

Supplementary service access siring 
RFU. 



Figure 36: Coding of type 



Name: 



Contents: The alphanumeric name the user has assigned for corresponding phone number or 
Supplementary services access string. 

Coding: According to the default 8-bit alphabet 1SO/IEC 8859- 1 [9). 
Network address record number: 

Contents: Record number of the corresponding network address. Network addresses are stored in 
EF NWT 

Coding: Binary. NULL ("00") value indicates a free record. When storing the Supplementary service 
access strings to the TETRA address, this field is set to M FF\ 

Call modifier record number: 

Contents: This byte identifies the number of a record in the EF CMT containing an associated call modifier 
mformation. The use of this byte is optional. If it is not used it shall be set to "FF\ 

Coding: Binary. 

TETRA address or Supplementary service access string: 

Contents: The identity that is used when calling to a TETRA phone or Supplementary service strings to 
be stored. 

Coding: When the field contains a TETRA address the field is binary-coded. When storing 
Supplementary service strings on this field, the digits and characters are BCD-coded according to 
EN 300392-2 [3]. 

Extension A record number: 

Contents: This byte identifies the number of a record in the EF^^ containing an associated 

supplementary services access string overflow. The use of this byte is optional. If it is not used, it shall 
be set to M FF\ 



Coding: Binary. 
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10.3.29 EFexta (Extension A) 

This EF shall contain the overflow of a Supplementary service access string as defined in table 45. 



Table 45: Contents of Extension A EF 



Identifier: - 6F1D" 


Structure: linear fixed 


I 


Optional 


Record lenqth: 20 byte* 


5 I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








I Bytes 


Description 


M/O 


Lenqth 


1 


Lenqth of extension data n 


M 


1 


2 to 19 


Overflow data 


M 


18 


20 


Next record number 


M 


1 



Length of extension data: 

Contents: This field gives the number of digits of the following "Overflow data" field containing an 
actual BCD number. 

Coding: Binary. NULL ("00") value indicates a free record. 
Overflow data: 

Contents: Overflow data of a Supplementary services access string. 
Coding: BCD according to EN 300 392-2 [3]. 
Next record number: 

Contents: record number of the next extension record to enable storage of information longer than 18 
bytes. 

Coding: record number of next record. TP identifies the end of the chain. 

10.3.30 EFfongwt (Fixed dialling numbers with Gateways) 

This EF shall contain FDN as defined in table 46. In addition it contains record numbers of associated gateway, call 
modifier and^gate way extension records. 

NOTE I: When calling to phone numbers contained in this EF from within a TETRA network, the gateway address 
is sent with the dialled number. 

NOTE 2: Fixed dialling numbers are used for example in a situation when a supervisor in an organization fixes the 
numbers on a SIM card so that a worker of the organization may only call to work related numbers. 
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Tabfe 46: Contents of Fixed dialling numbers with Gateways EF 

Identifier: '6F1E* | Structure: linear fixed | Optional 

Record length: X + 12 bytes | Update activity: low 

Access Conditions: 

RE AO PIN1 

UPDATE PIN2 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Description 


M/O 


Length 


1 toX 


Name 


O 


X 


X + 1 


Length of dialling number contents 


M 


1 


X + 2 to X + 9 


Dialling number 


M 


8 


X+ 10 


Gateway address record number 


M 


1 


X+ 11 


Call modifier record number 


M 


1 


X+ 12 


Gateway Extension2 record number 


M 


1 



For contents and coding of all data items see the respective data items of the EFadngwt wiln lnc exception 
that gateway extension records are stored in the EF CWTEXT2 . 

1 0.3.31 EF G wtext2 (Gateway Extension2) 

This EF shall contain gateway extension data of an FDN (see Gateway Extension! record number in clause 10.3.30) as 
defined in table 47. Gateway Extension data is caused by an FDN which is greater than the 16 digit capacity of the 
EF FDNGwr- Tne remainder is stored in this EF as a record, which is identified by a specified identification byte inside 
the EFpDNGWT- 



Table 47: Contents of Gateway Extension2 EF 



Identifier -6F1F" | 


Structure: linear fixed 


I 


Optional 


Record length: 13 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN2 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Record Type 


M 


1 


2 to 12 


Extension data 


M 


11 


13 


Identifier 


| M 


1 



Contents and coding shall be as defined in TS 100 977 [5J. 
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1 0.3.32 EFfdntetra (Fixed dialling numbers for TETRA network) 

This EF shall contain the Fixed Dialling Numbers (FDN) lo be used within TETRA network ns defined in table 48. 
Table 48: Coding of Fixed dialling numbers for TETRA network EF 



Identifier: "6F20" 



Record length: X + 7 bytes 



Structure: linear fixed 



Update activity: low 



Optional 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
PIN2 
ADM 
ADM 



Bytes 


Description 


M/O 


Lenqth 


1 


Type 


M 


1 


2 to X + 1 


Name 


M 


X 


X + 2 


Network address record number 


M 


1 


X + 3 to X + 5 


SSI of TETRA address 


M 


3 


X + 6 


Call modifier record number 


M 


1 


X + 7 


Extension B record number 


M 


1 



For contents and coding of all data items see the respective data items of the EF ADNTETRA . 

10.3.33 EF E xtb (Extension B) 

This EF shall contain the overflow of a Supplementary service access siring as defined in table 49. 

Table 49: Contents of Extension B EF 



Identifier: "6F21" 


Structure: linear fixed 


1 


Optional 


Record length: 20 bytes 


1 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PINl 
PIN2 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Length of extension data 


M 


1 


\ 2 to 19 


Overflow data 


M 


18 


20 


Next record number 


M 


1 



For contents and coding of a!) data items sec the respective data items of the EF, 
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10.3.34 EF LNDGWT (Last number dialled with Gateways) 

This EF shall contain the last numbers dialled (LND) as defined in table 50. In addition it contains record numbers of 
associated gateway, call modifier and gateway extension records. 

NOTE: When calling to phone numbers contained in this EF from within a TETRA network, the gateway address 
is seni with the dialled number. 

Table 50: Contents of Last number dialled with Gateway EF 



Identifier: "6F22" 



I 



Record length: X + 12 bytes 



Structure: cyclic 



Optional 



Update activity: high 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
PIN1 
ADM 
ADM 





Bytes 


Description 


M/O 


Lenqth 


1 toX 


Name 


O 


X 


X+ 1 


Length of diallinq number contents 


M 


1 


X + 2 to X + 9 


Dialling number 


M 


8 


X+ 10 


Gateway address record number 


M 


1 


X+ 11 


Call modifier record number 


M 


1 


X+ 12 


Gateway Extensionl record number 


M 


1 



Contents and coding: see EF ADNGNVrT . 

10.3.35 EF LNDTETRA {Last numbers dialled for TETRA network) 

This EF shall contain the last numbers dialled to TETRA phones within TETRA network as defined in table 5 1 . 
Table 51: Contents of Last numbers dialled for TETRA network EF 



Identifier '6F23* 



Record lenqth: X + 7 bytes 



Structure: cyclic 



Update activity: high 



Optional 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
PIN1 
ADM 
ADM 





Bytes 


Description 


M/O 


Length 


1 


Type 


M 


1 


2toX 


Name 


M 


X 


X + 2 


Network address record number 


M 


1 


X + 3 to X + 5 


SSI of TETRA address or Supplementary 
service access string 


M 


3 


! X + 6 


Call modifier record number 


M 


1 


X + 7 


Extension A record number 


M 


1 



For contents and coding of all data items see the respective data items of the EF 
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1 0.3.36 EFsdngwt (Service Dialling Numbers with gateway) 

This EF shall contain the special user-non-modifiable Service Dialling Numbers (SDN) thai arc used when calling to a 
phone outside ihc TETRA network as defined in table 52. In addition it contains record numbers of associated gateway, 
call modifier and gateway extension records. 

NOTE: When calling to numbers contained in this EF from within a TETRA network, the gateway address is sent 
with the dialled number. 

Table 52: Contents of Service Dialling Numbers with gateway EF 

Identifier: "6F24- | Structure: linear fixed | Optional 

Record length: X + 12 bytes | Update activity: low 

Access Conditions: 

READ PIN1 

UPDATE ADM 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Descriplion 


M/O 


Length 


1 toX 


Name 


O 


X 


X+ 1 


Length of dialling number contents 


M 


1 


X ♦ 2 to X + 9 


Dialling number 


M 


8 


X+ 10 


Gateway address record number 


M 


1 


X+ 11 


Call modifier record number 


M 




X+ 12 


Gateway Extension3 record number 


M 


1 



For contents and coding of all data items see the respective data items of the EF ADNGWT (see clause 10.3.25), 
with the exception that gateway extension records are stored in the EF CWTEXT3 . 

10.3.37 EF GWTEX T3 (Gateway Extension3) 

This EF shall contain gateway extension data of an SDN (see Extension3 record number in clause I0.3.36) as defined in 
table 53. Gateway Extension data is caused by an SDN which is greater than the 16 digit capacity of the EF SDNCWT . 
The remainder is stored in this EF as a record, which is identified by a specified identification byte inside the 
EF SDNCWT- 



Table 53: Contents of Gateway Extension3 EF 



Identifier: "6F25* | 


Structure: linear fixed 


I 


Optional 


Record length: 13 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Lenqth 


1 


Record Type 


M 


1 


2 to 12 


Extension data 


M 


11 


13 


Identifier 


M 


1 



Contents and coding shall be as defined in TS 100 977 [5 J. 
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10.3.38 EFsdntetra (Service Dialling Numbers for TETRA network) 

This EF shall contain ihc user-non-modifiable phone numbers lhat are used when calling to a TETRA phone as defined 
in tabic 53. 

Table 54: Contents of Service Dialling Numbers for TETRA network EF 

Identifier: "6F26" I Structure: linear fixed | Optional 

Record length: X + 6 bytes I Update activity: low 

Access Conditions: 

READ PIN1 

UPDATE ADM 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Description 


WO 


Length 


1 


Type 


M 


1 


2 to X + 1 


Name 


M 


X 


X + 2 


Network address record number 


M 


1 


X + 3 to X + 5 


SSI of TETRA address 


M 


3 


X + 6 


Call modifier record number 


M 


1 



For contents and coding of all data items sec the respective data items of the EF ADNTETR/V 

10.3.39 EFstxt (Status message texts) 

This EF shall contain text strings to be displayed upon receipt of precoded status message as defined in table 55. 



Table 55: Contents of Status message texts EF 



Identifier: "6F27" | 


Structure: linear fixed 


I 


Optional 


Record length: X + 2 bytes 


I 


Update activity: tow 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


P1N1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length I 


1 to 2 


Message value 


M 


2 


3 to X + 2 


Message text 


M 


X 



Message value: 

Contents: The message value identifies the actual message. 

Coding: The message value is coded with two bytes as defined in EN 300 392-2 13] A reserved 
{"000r'-"7FFF M ) value indicates an empty record. 

Message text: 

Contents: The message text contains the text string corresponding lo the message value and it is shown to 
the user instead of or with the message value. 

Coding: The siring shall use the default 8-bit alphabet ISO/1EC 8859- 1 [9] and coded as defined in 
figure 37. The message text is coded with X bytes. If the text is shorter than X bytes, the remaining bytes 
shall be filled with FF. 
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Byte 3: 



b8 


b7 


b6 


b5 | M 


b3 


b2 


bl 



etc. 

Byte X + 2: 



h8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



First bit of message text (LSB of byte 3) 



MSB of byte 3 



LSB ofbyteX + 3 



Last bit of message text (MSB of byte X + 2) 



Figure 37: Coding of message text 

NOTE: Of the precoded status messages only messages above and including the value of 32 768 arc stored in ihts 
ER 



10.3.40 EF MSG txt (SDS-1 message texts) 

This EF shall contain text strings to be displayed upon receipt of an SDS-1 (user defined data !) message as defined in 
table 56. 

Table 56: Contents of SDS-1 message texts EF 



Identifier: "6F28 U | 


Structure: linear fixed 


1 


Optional 


I Record length: X + 2 byte; 


1 


Update activity: low i 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 2 


Message value 


M 


2 


3 to X + 2 


Message text 


M 


X 



Message value: 

Contents: The message value identifies the actual message. 

Coding: The message value is coded with two bytes as defined in EN 300 392-2 [3|. 

NOTE: User application knows which Message values are valid, because all values have been reserved for user 
application. Therefore the user application also knows which records contain valid data. 
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Message text: 



Contents: The message text contains the text string corresponding to the message value and it is shown to 
the user instead of or with the message value. 

Coding: The string shall use the default 8-bil alphabet ISO/lEC 8859- 1 [9] and coded as defined in 

fi ^^ 38 ; i 7 hC mCSSage tCXl is C0ded Wilh X byles ' !f lhe texl is shorler th ™ x bylcs. the remaining bytes 
shall be filled with FR 5 J 

Byte 3: 



b8 



b7 


b6 


b5 


b4 


b3 


b2 


bl 



etc. 

Byte X + 2: 



pb8 



b7 


b6 b5 


b4 


b3 


b2 


bl 



First bit of message text (LSB of byte 3) 



MSB of byte 3 



LSB ofbyteX + 3 



Last bit of message text (MSB of byte X + 2) 



Figure 38: Coding of SDS-1 message text 

NOTE: The SDS- 1 message text definitions are applicable to the user's home network only. 
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10.3.41 EF SD si23 (Status and SDS type 1 , 2 and 3 message storage) 

This EF shall contain ihe numerical values of Status messages and SDS lypc 1, 2 or 3 messages (and associated 
parameters) which have either been received by the MS from Ihe network, or are to be used as MS originated messages 
as defined in table 57. 

Table 57: Contents of Status and SDS type 1 , 2 and 3 message storage EF 



Identifier •6F29 M \ 


Structure: linear fixed 


I 


Optional 


Record lenqth: 46 bytes 


Update activity: high 




Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
P1N1 
ADM 
ADM 






Bytes 


Description 


M/O 


Lenqth 


1 


Message status and area selection 


M 


1 


2 to 32 


Message destination and source identifier 


M 


31 


33 to 34 


Message Index 


M 


2 


35 to 37 


Network Time 


M 


3 


38 to 46 


Message header and message 


M 


9 



Message status and area selection: 

Contents: Status of the message stored. 

The area selection used in the MS originated SDS as defined in EN 300 392-2 [3]. 
Coding: shall be as defined in figure 39. 
Byte I: 



b8 


b7 


b6 


b5 


M 


b3 


b2 



0 
0 

I 

i 

0 
0 

I 

1 



0 

I 

0 

I 

0 

1 

0 



0 
0 
0 
0 

1 
I 
I 
I 



Record not used 

RFU 

RFU 

RFU 

MS terminated message; message read 

MS terminated message; message to be read 

MS originating message; message sent to the network 

MS originating message; message to be sent 

RFU 

Area selection 



Area selection 



Figure 39: Coding of message status and area selection 



Message destination and source identifier: 

For contents and coding sec clause 10.3.42. 
Message index: 

Contents: Message index of the message stored. The Message Index will be incremented each lime a new 
message is stored in this file, [n case of an overflow the Message Index will bo reset to 0. 

Coding: 1 6 bits, binary. 
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Network time: 

Contents: It indicates approximate reception time of the SDS message. 
Coding: 24 bits binary as defined in EN 300 392-2 (31. 
Message header and message: 

Contents: Contains information on transmitted or received messages. 

Coding: The first byte is the short data type identifier as defined in EN 300 392-2 [3] and shall be coded 
as defined in figure 40. 

NOTE: The User defined data 4 is not included as the EF SDS4 contains that. 
Byte 38: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 0 

0 I 

1 0 

1 1 



User defined daia I 
User defined data 2 
User defined data 3 
RFU 
RFU 



Figure 40: Message header 

The bytes 39 to 46 are the user data 1 ,2,3 (left aligned) as defined in EN 300 392-2 [3]. 
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10.3.42 EF S os4 (SDS type 4 message storage) 

This EF shall contain lexi strings (and associated parameters) which have either been received by the MS from the 
network, or are to be used as an MS originated message as defined in tabic 58. 



Table 58: Contents of SDS type 4 message storage EF 



Identifier: "6F2A" ! 


Structure: linear fixed | Optional 


Record tenqth: 255 bytes 


„ I , Update activity: hiqh 



Access Conditions: 

READ PIN1 

UPDATE PIN1 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Description 


M/O 


Lenqth 


1 to 2 


Message status and area selection 


M 


2 


3 to 33 


Message destination and source identifier 
(see note 1) 


M 


31 


34 


Protocol Identifier 


M 


1 


35 to 
35 + X - 1 


Message header (see note 2) 


O 


X 


35 + X to 
36 + X 


Message Index 


M 


2 


37 + X to 
39 + X 


Network Time 


M 


3 


40 + X to 
41 + X 


Length Indicator 


M 


2 


42 + X to 
- 254 


User Data 


M 




255 


Message extension record number 


O 


1 



NOTE 1 : The address length shall be according to the address type (first byte in the 

message destination/source). 
NOTE 2: For protocol identifier less than 128 there is no message header. 



Message status and area selection: 

Contents: It contains the status of the message stored and information if a delivery report of MS 
originating message is stored in the EF SDSR . 

The area selection used in the MS originated SDS as defined in EN 300 392-2 [3J. 
^ Coding: Shall be coded as defined in figure 41. 
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Byte I: 



b8 


b7 


b6 


b5 


M 


b3 


b2 



0 


0 


0 


Record not used 


0 


I 


0 


RFU 


I 


0 


0 


RFU 


I 


I 


0 


RFU 


0 


0 


I 


MS terminated message; message read 


0 

I 


I 

0 


I 
I 


MS terminated message; message to be read 

MS originating message; message sent to the network 



I l I MS originating message; message lo be sent 

RFU 

Area selection 



Area selection 



Byte 2: 



bS 


b7 


b6 


b5 


b4 


b3 


b2 


b) 



x x I 0 I MS originating message; message sent to the network 
0 0 I 0 I Status report not requested 

0 I I 0 l Status report requested but not yet received 

1 0 I 0 l Status report requested, received but not stored in EF SDSR 
I ! \ 0 l Status report requested, received and stored in EF SDSR 

RFU 



Figure 41: Coding of message status and area selection 

Message destination and source identifier: 

Contents: This data item shall contain: 

For received message: 

The called party address (Address type identifier and the actual address). 

Communication type. 

The calling party address. 

For transmitted message: 

The called party address. 

The calling and called address can be an SNA, SSL TS1 or external subscriber. 

NOTE: The present document does not define how calling address SNA is known lo the SIM. 

Coding: 

The called party address: 

The address type identifier shall be coded as defined in figure 42 and it shall define the type of the 
following address. 
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Shon number address (SNA) 

Short subscriber identity (SSI) 

TETRA subscriber identity (TSI) 

External subscriber number 

RFU 

RFU 

RFU 

RFU 

RFU 



Figure 42: Coding of address type identifier 

Called party short number address (SNA): 

Contents: The called party short number address consists of the SNA of the called user as defined in 
EN 300 392-2 [3] - byte 4: Address, bytes 5 to 17 set to "FF*. 

Called party short subscriber identity (SSI): 

Contents: The called party short subscriber identity address consists of the SSI of the called user as 
defined in EN 300 392-2 [3) - bytes 4 to 6: Address, bytes 7 to 17 set to "FF M as defined in figure 43. 



r 



£TSI 



Byte 3: 



b8 | b7 


b6 


b5 


b4 


b3 


b2 


bl 



PTT 

0 0 0 



0 


0 


0 


0 


0 


I 


0 


1 


0 


0 


1 


1 


1 


0 


0 


1 


0 


1 


I 


1 


0 


I 


1 


1 
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B8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



~ LSB ofSSI 



Byte 5: 



B8 b7 



b6 



b5 



b4 b3 



b2 



L Ni 



Ninth bit of SSI 



Byte 6: 



B8 


b7 


b6 


b5 


b4 


b3 


b2 


Ml 



MSB of SSI 



Figure 43: Coding of SSI 

Called parly TETRA subscriber identity: 

^^ U Kr The 1 ? TRA subscriber idcmit y ™ defined in EN 300 392-1 [2], consists of Country Code 
( CC . Code (MNC) and Short Su bscriber Identity (SSI) . bytes 4 to 9: address, bytes 10 to 17 
set to FF shall be coded as defined in figure 44. y 
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Bylc 4: 



b8 


b7 


b6 


b5 


M 


b3 


b2 


bl 



LSB of MCC address 



Byte 5: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of MCC address 

LSB ofMNC address 



Byte 6: 



b8 


b7 


b6 


b5 


b4 


b3 


bl 


bl 



MSB of MNC address 

N Byte 7: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



LSB of SSI 



ETSI 



78 



ETSI TS 100 812-2 V2.3.1 (2003-10) 



Byie 8: 



b8 



b7 


b6 


b5 


b4 


b3 



b2 | bj | 



Ninth bit of SSI 



Byte 9: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of SSI 



Figure 44: Coding of ITSI/GTSI 

Called party external subscriber number: 

Contents: It consists of the gateway address record number, number of digits in the subscriber number 
and the subscriber number. 

Coding: 

Byte 4: The gateway address record number identities the number of a record in the EF GWT 
containing an associated gateway address. 

ByteS: The number of digits (n) in the subscriber number. 

Bytes 6 to 6+n/2- 1 : The subscriber number digits (less or equal to 24). Each digit shall be encoded 
as defined in EN 300 392-2 [3], clause 14.8.20. The potentially unused half byte shall be set to "F 
and unused bytes to "FF for bytes up to and including byte 17. 

Communication type: 

Content: It consists of the communication type of the received message. 

Coding: Shall be as defined in figure 45. 
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Byte 1 8: 



b8 


B7 


b6 


b5 


b4 


B3 


B2 


bl 



IT 



o 
o 
i 
i 



0 

I 

0 

I 



RFU 

Individual 
Croup 
RFU 
RFU 



Unused bits shall be set to "I". 

Figure 45: Coding of communication type 

The calling party address: 

Coding: Bytes 19-33. Same format as the called party address (address lype and address). 
Protocol Identifier: 

Content: It shall indicate to the addressed entity application which lype of application protocol is using 
the SDS service. See definition in EN 300 392-2 [3J. 

Coding: I byte as defined in EN 300 392-2 [3]. 

Message Header: 

Content: 

For originating message it contains: the message reference, delivery report request, storage, validity 
period, service selection, forward address (only in case of storage). 

For terminating message, it contains: the message reference, delivery report request, storage, 
validity period, short form report, and forward address. 

Coding: 

For originating message: 
Message reference: 

Each SDS-TL message carrying a SDS-TL data transfer service PDU shall contain a message 
reference. See definition in EN 300 392-2 13]: I byte - n FF" - message to be sent, otherwise 
the message reference used in the message sent to the network. 

Delivery report request: 

2 bits as defined in EN 300 392-2 [3] (bl-b2 of byte 2 of message header). 

Storage: 

I bit as defined in EN 300 392-2 [3] (b8 of byte2 of message header). 
Validity Period: 

5 bits as defined in EN 300 392-2 [3] (bl-b5 of byte 3 of message header). 
Service Selection: 

I bit as defined in EN 300 392-2 {3] (b8 of byte 3 of message header). 
Forward Address: 

Same definition as the Message destination and source - only in case of storage. 



ETSt 



80 ETSI TS 100 812-2 V2.3.1 (2003-10) 

For terminating message: 
Message reference: 

Each SDS-TL message carrying a SDS-TL data transfer service PDU shall contain a message 
reference. See definition in EN 300 392-2 [3J: I byte - TF" - message to be sent, otherwise 
the message reference used in the message sent to the network. 

Delivery report request: 

2 bits as defined in EN 300 392-2 [3] (bl-b2 of byte 2 of message header). 

Storage: 

1 bit as defined in EN 300 392-2 [3) (b8 of byte 2 of message header). 
Validity Period: 

5 bits as defined in EN 300 392-2 [3] (bl-b5 of byte 3 of message header). 
Short form report: * 

2 bits as defined in EN 300 392-2 [3] (b7-b8 of byte 3 of message header). 
Forward Address: 

Same definition as the Message destination and source - only in case of storage. 

Message index: 

Content: It contains a message index .The Message Index will be incremented each time a new message 
is stored in this file. In case of an overflow the Message Index will be reset to 0. 

Coding: 16 bits, binary. 

Network time: 

Content: It indicates approximate reception time of the SDS message. 

Coding: 24 bits binary as dei in EN 300 392-2 [3J. 
Length Indicator: 

Content: It contains the length in bits of the user data. 

Coding: 1 1 bits, binary. 
User Data: 

Content: it contains the user data, as defined in EN 300 392-2 [3). 
Message Extension record number: 

Contents: This byte identifies the number of a record in the EF MSCEXT containing an associated message 
overflow. The use of this byte is optional. If it is not used, it shall be set to "FF". 

Coding: Binary. 
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10.3.43 EFmsgext (Message Extension) 

This EF shall contain the overflow of an SDS-4 message which is longer than ihc space reserved for it in EF SDS4 as 
denned in table 59. 

Table 59: Contents of Message extension EF 



\ Identilier. "6F2B" j 


Structure: linear fixed 


I 


Optional 


Record length: 16 bytes 


I 


Update activity: hiqh 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 16 


Overflow message 


M 


16 



Overflow message: 

Contents: Overflow data of a SDS-4 message exceeding the length reserved for it in EF SDS4 
Coding: As defined in EN 300 392-2 [3]. All bytes following the PDUs shall be filled with "FF*\ 
NOTE: A free record is not pointed to by any record in EF SDS4 . 



10.3.44 EFeaddr (Emergency addresses) 

The user (or the organization) can determine the address to which an emergency call is initiated; to a predetermined 
address or to the group last used by the user. The selection is controlled by the addresses stored in EF^^r. The EF 
shall contain information as defined in table 60. 

Where a data call type is selected, the ESource field indicates the preferred source of the data to be included in the 
message for status, SDS-I, SDS-2, SDS-3 and SDS-4 messages. In each case the data content can be a pre-defined 
value stored in EF SDSI23 or EF SDS4 (or a data field obtained from an application running in the terminal). 



Table 60: Contents of Emergency addresses EF 



identifier: "6F2C" | 


Structure: linear fixed 


I 


Mandatory 


Record size: 17 bytes 


I Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


ALW 

PIN1/PIN2 (see note) 

ADM 

ADM 






Bytes 


Description 


M/O 


Length 


1 


Emergency call definition 


M 


1 


2 to 17 


Emergency address 


M 


16 


NOTE: Card issuer will choose between PIN1 or PIN2 protection. 



Emergency call definition: 

Contents: One byte indicating the call type and the emergency address type coded on the Emergency 
address field, and the source of the message content for status and data calls. 

Coding: shall be as defined in figure 46. 

bl-b4: Emergency call type. 

b5-b8: Call setup parameters. 
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b5: Source of the data to be transmuted in ihc emergency data message. 
b6-b7: Emergency call type. 
b8: Simplex/Duplex. 
NOTE: An empty record is indicated by NULL f F) value in bits bl-b4. 



b8 


b7 


b6 


b5 


b4 


b3 


b2 I bl 



0 
0 

1 
I 



0 


0 


0 


0 


TETRA address 


0 


0 


0 


1 


DMO address 


0 


0 


1 


0 


PABX address (gateway and External subscriber number) 


0 


0 


! 


1 


PSTN number (gateway and External subscriber number) 


0 


1 


0 


0 


Last active group address 


0 


1 


0 


1 


RFU 


0 


I 


] 


0 


RFU 


0 


1 


1 


1 


RFU 




0 


0 


0 


Status/SDS123 msg record number 




0 


0 


1 


SDS4 message record number 




0 


! 


0 


RFU 




0 


1 


I 


RFU 




\ 


0 


0 


RFU 




I 


0 


1 


RFU 




1 


1 


0 


RFU 




1 


1 


1 


Record contains no valid data 



0 

1 



0 

1 

0 

1 



0 

I 



Predefined and stored in EF EADDR 

From an application in the terminal 

Point-to-Point 

Point to Multipoint 

Point-to-Multipoint acknowledged 

Broadcast 

Simplex 

Duplex 



Figure 46: Coding of Emergency call definition 



Emergency address: 



Contents: The address that can be used when the user initiates an emergency call. The type of call is 
determined by byte 1. 

In the case of a TETRA address the emergency address consists of the ITSI (or GTSI) of the called 
party. 

In the case of a DMO address the emergency address consists of the ITSI (or GTSI) of the called 
party and the DMO channel number. 

In the case of a PABX address the emergency address consists of the PABX Gateway and the 
External Subscriber number. (Sec coding.) 

In the case of a PSTN address the emergency address consists of the PSTN Gateway and the 
externa] subscriber number. (See coding.) 

In the case of the last active group address, the address Held in EF EADDR is unused - the address for 
the emergency call should be obtained from EF C1NF0 . 

In the case of status, SDS-I. SDS-2, SDS-3 and SDS-4 messages the content of this data item 
consists of the message record number in SDS 123 or SDS4 as appropriate. 
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Coding: 

In ihc case of a TETRA address, according to EF, TSh 

In the case of a DMO address, according to EF |TS| followed by the 24 bit DMO channel number, 
coded according to EF DM0Ch . 

In the case of a PABX number, the Gateway 1TSI is coded according lo EF JTS | and the External 
Subscriber number is BCD coded as defined in EN 300 392-2 [3]. 

The structure shall be as following: 

Byle 2: Length of BCD encoded number. 

Byle 3: Gateway address record number. 

Byle 4 to 16: Dialling Number. 

Byte 17: Gateway Extension I record number. 

In the case of a PSTN number, the Gateway ITSI is coded according lo EF ITSI and the external 
PSTN address is BCD coded according to EN 300 392-2 [3], 

The structure shall be as following: 

Byte 2: Length of BCD number. 

Byte 3: Gateway address record number. 

Byte 4 to 16: Dialling Number. 

Byte 17: Extension I record number. 

In the case of the last used group address, this field is unused - the address for the call to be 
obtained from EF C j NF0 . 

NOTE: The emergency addresses are stored in order of precedence. 

10.3.45 EFeinfo (Emergency call information) 

This EF shall contain information aboul setting up and continuing an emergency call as defined in table 61. 

Table 61: Contents of Emergency call information EF 



idenlilier: B 6F2D M 


I Structure: transparent 


1 


Mandatory 


File size: 2 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


ALW 
PIN1 
ADM 
ADM 








Bytes 


Description 


WO 


Length 


1 


Emergency cal 


continuation 




M 


1 


2 


Current emergency call record number 


M 


1 



Emergency call continuation: 

Contents: A flag indicating whether an interrupted emergency call should continue at power-on. 
Coding: shall be as defined in figure 47. 
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Byte I : 



b8 


b7 


b6 


b5 


b4 


b3 


* 





0 Emergency call should continue 

1 Emergency call should noi coniinue 
RFU 



Figure 47: Coding of emergency call continuation 

Current emergency call record number: 

Contents: One byte field available to the emergency application to store on the SIM information 
pertaining to an emergency call in progress, typically to cater for the possibility of unexpected power- 
down. It may be the record number of the record in EF EADDR used to set up the emergency call currently 
in progress. A zero value indicates that no call is in progress. 

Coding: Binary. 

10.3.46 EFoMoch (DMO radio channel information) 

This EF shall contain a selection of DMO radio channels as defined in table 62. 

Table 62: Contents of DMO radio channel information EF 



Identifier "6F2E" ! 


Structure: linear fixed 


I 


Optional 


Record size: 4 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Lenqth 


1 


DMO radio channel type 


M 


1 


2 to 4 


DMO radio channel number 


M 


3 



DMO radio channel type: 

Contents: This field contains the DMO radio channel type information. 
Coding: shall be as defined in figure 48. 
Byte l: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 
0 

I 
I 



Regular 

Emergency 

Managed 

RFU 

RFU 



NULL ("FF") value indicates an empty record. All other values are reserved. 

Figure 48: Coding of radio channel type 

NOTE: Emergency calls are not restricted to emergency channels. Emergency calls may also be made on regular 
DMO radio channels and managed DMO radio channels. 
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DMO radio channel number: 

Contents: This field contains the DMO radio channel definition. 
Coding: shall be as in table 63. 



Table 63: Contents of DMO radio channel number 



Information 
sub-element 


Length 


Type 


C/O/M 


Value 


Remark 


Carrier number 


12 


1 


M 




Carrier frequency number (see note 1) 


Frequency band 


4 


1 


M 




Provision for different frequency 
bands (see note 1) 


Offset 


2 


1 


M 




Provision for different offsets, 
(see note 2) 


Duplex spacing 


3 


1 


M 




Provision for different duplex spacing 
(see notes 1 and 3) 


DMO 

normal/reverse 
operation 


1 


1 


M 


0 


DMO uplink frequency = 
DMO downlink frequency 
+ duplex spacinq (see note 3) 










1 


DMO uplink frequency = 
DMO downlink frequency 
- duplex spacinq (see note 3) 


Reserved 


2 


1 


M 


oo 2 


Default value = 00 2 


NOTE 1 : Refer to annex F in EN 300 392-2 (3) for meaning of the values. 

NOTE 2: Refer to clause 21 .4.4.1 in EN 300 392-2 [3], table 333 for the meaning of the offset values. 

NOTE 3: A DMO radio channel may comprise either one or two radio frequencies. 0,0 MHz value of 
duplex spacing indicates single frequency operation. For two frequency operation the carrier 
number indicates the direct mode RF carrier where the MS should receive (i.e. the downlink 
RF carrier). Then the duplex spacing information element together with the DMO 
, normal/reverse operation information element indicate the direct mode RF carrier where the 
MS should transmit (i.e. the uplink RF carrier). 



10.3.47 EF MSC h (MS allocation of DMO channels) 

This EF shall contain a bitmap which allocates a subset of the DMO channels in EF DM0Ch as defined in lable 64. There 
shall be one bit corresponding to each record in EFq^q^. 

NOTE I : The information in the following EF may not be accurate with respect to ETS 300 396 series. This EF 
will be updated accordingly when necessary. 



Table 64: Contents of MS allocation of DMO channels EF 



Identifier "6F2F * \ 


Structure: transparent | Optional 


Filo size: X bytes 


I Update activity: low 


Access Conditions: 




READ 


PIN1 


UPDATE 


ADM 


INVALIDATE 


ADM 


REHABILITATE 


ADM 



Bytes 


Description 


M/O 


Length 


1 


Allocation llaq 1 to 8 


M 


1 


etc. 


etc. 






X 


Allocation ftaq 8*X-7 to 8'X 


M 


1 



NOTE 2: The value of X should be sufficiently large to accommodate all the records in EF DM0Ch . 
Allocation (lag: 

Coding: Channel is allocated = I , channel is not allocated a 0. Allocation flags shall be coded as defined 
in figure 49. 
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Byte I: 



b8 | b7 | b6 


b5 | b4 


b3 


b2 


b) 



J Allocate flag of record I in EF 0M0CH 



Allocate flag of record 8 in EF DM0Ch 



etc. 

Byte X: 



b8 


b7 | b6 


b5 


b4 


b3 


b2 


bl 



I Allocation flag of record 8*X-7 in EF DM0Ch 



Allocation flag of record 8*X in EF DM0Ch 



Figure 49: Coding of allocation flags 

10.3.48 EF KH (List of Key Holders) 

This EF shall contain a list of those ITSf numbers that can act as a key holder for this subscriber's ITSI as defined in 
table 65. 

Table 65: Contents of List of Key Holders EF 



Identifier: "6F30* | 


Structure: transparent 


I 


Optional 


Record size: 6 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 6 


Key holder ITSf 


M 


6 



Key holder ITSI; 

Contents: Key holder ITSI consists of MCC, MNC and ISS1. 

Coding: As in EF, TSI . Record Tilled with NULL ("FF") value indicates no ITS! is stored. 
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1 0.3.49 EFr E pgate (DMO repeater and gateway list) 



This EF shall contain a list of ihosc DMO repealers, gateways and REP/GATEs thai this subscriber is allowed to use as 
defined in table 66. Each address is 10 bits long. DMO equipment type is also identified. 

Table 66: Contents of DMO repeater and gateway list EF 



Identifier m Sf3V | 


Structure: linear fixed 


I 


Optional 


Record size: 2 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Lenqth 


1 to 2 


DMO equipment type and identity 


M 


2 



DMO equipment type and identity: 

Contents: This field contains the DMO equipment type and the first pan of its identity. 
Coding: shall be as defined in figure 50. 
Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 
0 
0 
0 

I 
l 
I 
I 



0 
0 

I 
I 

0 
0 

I 
I 



0 

I 

0 

1 

0 

I 

0 

1 



DM-GATE 
DM-REP, Type I A 
DM-REP, Type 1 B 
DM-REP. Type 2 
DM-REP/G ATE, Type I A 
DM-REP/GATE, Type IB 
RFU 

Record contains no valid data 

RFU 
*RFU 
[RFU 

LSB of equipment identity 
2 nd bit of equipment identity 



Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



I 3"* bit of equipment identity 



MSB of equipment identity 



Figure 50: Coding of DMO equipment type and identity 
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10.3.50 EF A o (Administrative data) 

This EF shall contain information concerning (he mode of operation according to the type of SIM. such as normal 
operation, type approval (to allow specific use of the ME during type approval procedures of e.g. the radio equipment) 
or others as defined in table 67. 

Table 67: Contents of Administrative data EF 

Identifier "6F32" | Structure: transparent ~T Mandatory 

File size: 1 byte \ Update activity: low 

Access Conditions: 

READ ALW 

UPDATE ADM 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Description 


M/O 


Length 


1 


MS operation mode 


M 


1 byte 



MS operation mode: 

Contents: mode of operation for the MS. 
Coding: shall be as defined in figure 5 1 . 
Byte I: 



*b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



Loop back enabled (see note I ) 

Reporting enabled 

RFU 

RFU 

RFU 

RFU 

RFU 

RFU 



NOTE 1: Loop back enabled and security/authentication disabled (see ETS 300 394-2 (10]). 
NOTE 2: The coding "00* means normal operation. 

Figure 51: Coding of MS operation mode 



1 0.3.51 EFp REF la (Preferred location areas) 

This EF shall contain the preferred location area as defined in table 68. 

Table 68: Contents of Preferred location areas EF 

identifier: "6F33" | Structure: Transparent | Optional 

File size: 2 bytes I Update activity: low 

Access Conditions: 

READ PIN1 

UPDATE ADM 

INVALIDATE ADM 

REHABILITATE ADM 



Bytes 


Description 


M/O 


Length 


1 to 2 


Preferred location area 


M 


2 
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Preferred location area: 

Conients: a list of preferred location areas. 



Coding: Each element is coded in 2 bytes with the 2 highest order bits of the 2nd byte RFU as defined in 
figure 52. The first element (bytes 2 and 3) is shown in figure 52. See also EN 300 392-7 [4J. 



Byte I : 



b8 


b7 


b6 


b5 


t>4 


b3 | b2 


bl 



Byte 2: 



LSB of location area 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of location area 

RFU 

RFU 



NOTE: This LA is intended to be used during cell re-selection, the procedures are outside the scope of the present 
document. See EN 300 392-2 [3). 

Figure 52: Coding of preferred location area 

10.3.52 EF LNDCo m P (Composite LND file) 

This EF shalj contain a pointer to the LND entries in EF^, EF^^ and EF LNDTErRA as defined in table 69. 

Table 69: Contents of Composite LND file EF 



Identifier: "6F34* | 


Structure: cyclic 


i 


Optional 


Record lenqth: 3 bytes 


I 


Update activity: hiah 1 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Lenqth 


! 1 to 2 


Elementary File ID 


M 


2 


3 


Record No. in corresponding LND EF 


M 


1 



Elementary File ID: 

Contents: The ID of the file in which the LND record is stored. 
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Coding: shall be as defined in figure 53. 
Byte I: 



b8 




b6 


b5 


M 


b3 


b2 


bl 



0 0 EF within DF TETRA 

0 I EF wiihin DF TFL£COv 

1 C R - 
I I Rl-U 

RFU 



Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



Figure 53: Coding of elementary file ID 

Record No. in corresponding LND Elementary File: 
Contents: The record number of the LND. 
Coding: Binary. 

NOTE: This file shall be updated when any of the files EF UN0 , EF LNDCWT or EF^Q-rgy^ is updated. 

10.3.53 EFdfljstsgt (Status Default Target) 

This EF shall contain information concerning the default target for status message texts as defined in tabic 70. 

Table 70: Contents of Status Default Target EF 



Identifier. "6F35" I 


Structure: transparent 


I 


Optional 


File size: 16 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Acknowledgement required 


M 


1 byte 


2 


Address Type 


M 


1 byte 


3 to 16 


Address (see note) 


M 


14 bytes 


NOTE: The address length shall be according to the address type. The unused bytes 
shall be set to -FF". 



Acknowledgement required: 

Contents: Indicates if an acknowledgement is required. 
Coding: shall be as defined in figure 54. 
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b7 


b6 


b5 


b4 


b3 


b2 


bl 



x x x x x x x 0 acknowledgement required 
x x x x x x x I no acknowledgement required 

Figure 54: Coding of acknowledgement required 

Address Type: 

Contents: This data item contains the target address type. 
Coding: shall be as defined in figure 55. 
Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bt 



0 


0 


0 


No address defined 


0 


0 


I 


Short number address (SNA) 


0 


l 


0 


Short subscriber identity (SSI) 


0 


l 


I 


TETRA subscriber identity (TSI) 


I 


0 


0 


External subscriber identity 


i 


0 


I 


RFU 


I 


I 


0 


RFU 


I 


i 


! 


RFU 



RFU 



Figure 55: Coding of address type 

Address: 

Contents: The address could be: a short number address, or an SSI, or a TETRA subscriber identity or an 
external subscriber identity. 

Called party short number address. 

Coding: the called party short number address consists of the SNA of the called user as defined in 
EN 300 392-2 [3] - byte 3 = Address, bytes 4 to 16 set to "FF\ 

N Called party SSI. 

Coding: the SSI address of the called user as defined in EN 300 392-2 [3] - bytes 3 to 5 = Address, bytes 
6 to 16 set to H FF\ 

TETRA subscriber identity: 

Coding: the TETRA subscriber identity as defined in EN 300 392-1 [2], consists of Country Code 
(MCC), Network Code (MNC) and Short Subscriber Identity (SSI): byte 3 to 8 = address, bytes 9 to 16 
set to "FP: The coding shall be as defined in figure 56. 
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Byte 3: 



bS 


b7 


b6 | b5 


b4 


b3 







P_LSBofMCC address 



Byte 4: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of MCC address 
LSB ofMNC address 



Byte 5: 



b8 b7 b6 b5 b4 b? b2 bl 



MSB ofMNC address 



Byte 6: 



b8 



b7 



b6 



b5 



b4 



b3 



b2 



bl 



LSB of SSI 
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Byte 7: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



Byte 8: 



Ninth bil of SSI 



b8 


b7 


b6 


b5 


b4 


b3 


b2 





MSB of SSI 



Figure 56: Coding of ITSI/GTSI 

External subscriber identity: 

Contents: It consists of the external subscriber number and the gateway address record number. 

The gateway address record number identifies the number of a record in the EF CWT containing an 
associated gateway address - byte 3 is the number of the record in the EF GWT . 

The external subscriber number consists of the number of digits (less or equal to 24) and the digits. Each 
digit is as defined in EN 300 392-2 [3] - byte 4 - the number of digits, byte 5 to 5+n-l the digits, all 
unused set to H FF'. 



31 C77C 
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10.3.54 EFsosmemjstatus (SDS Memory Status) 

This EF shall contain storage information relating to the SDS4 service as defined in table 7 1 . 

The provision of this EF is associated with EFs»Si23 aml ' or ^ F SDS4- ^ es snal * b° Present together, or both absent 
from the SIM. 

Table 71: Contents of SDS Memory Status EF 



Identifier: "6F36 0 



Fiie size: 7 bytes 



Structure: transparent 



Update activity: low 



Optional 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
PIN1 
ADM 
ADM 



Bytes 


Description 


M/O 


Length 


1 


Last used TP-Message Reference 


M 


1 byte 


2 


SDS4 "Memory capacity exceeded" notification 
flag 


M 


1 byte 


3 


SDS123 memory capacity exceeded notification 
flag 


M 


1 byte 


4 to 5 


SDS4 last used message index 


M 


2 bytes 


6 to 7 


SDS 123 last used message index 


M 


2 bytes 



Last used Transport Protocol (TP)-Message Reference: 
Contents: 

The value of the TP-Message Reference parameter in the last mobile originated short message, as 
defined in EN 300 392-2 [31 

Coding: 

As defined in EN 300 392-2 [3]. 
SDS4 "Memory capacity exceeded" notification flag: 
Contents: 

This flag is required to allow a process of flow control, so that as memory capacity becomes 
available, the network service centre can be informed. 

Coding: shall be as defined in figure 57. 

Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



0 flag set 

1 flag unset, memory capacity available 
RFU 



Figure 57: Coding of memory capacity exceeded notification flag 

SDS 123 "memory capacity exceeded notification flag": 
Same as SDS4 "memory capacity exceeded". 
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SDS4 lasi used message index: 

Contents: The value of ihe last message index used for the SDS4 message. 

Coding: binary in iwo bytes. 
SDS 1 23 last used message index: 

Contents: The value of the last message index used for the SDS 123 message. 

Coding: binary in two bytes. 

10.3.55 EF WEL come (Welcome Message) 

This EF shall contain an alpha-numeric message displayed during the ME boot sequence as defined in table 72. 



Table 72: Contents of Welcome Message EF 



Identifier: "6F37" 


Structure: transparent 


I 


Optional 


File size: 32 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 32 


Message string 


M 


32 bytes 



Message siring 
Contents: 

A string defined by the network operator. 
Coding: 

According to the default 8-bit alphabet ISO/lEC 8859-1 [9] (Latin- 1). Unused bytes shall be set as 

"FF'\ 

10.3.56 EF SDS r (SDS delivery report) 

This EF shalf contain information in accordance with EN 300 392-2 [3] comprising delivery report messages which 
have been received by the MS from the network as defined in table 73. 

Each record is used to store the delivery report of a short data service message. The first byte of each record is the link 
between the delivery report and (he corresponding SDS in EF SDS4 . 



Table 73: Contents of SDS delivery report EF 



Identifier. "6F38 M ! Structure: linear fixed 


1 


Optional 


Record length: 2 bytes | Update activirv: tow 


Access Conditions: 






READ 


PIN1 






UPDATE PIN1 






INVALIDATE ADM 






REHABILITATE ADM 






Bytes 


Description 


M/O 


Length 


1 


SDS record identifier 1 


M 


1 


2 


SDS delivery status 


M 


1 
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SDS record identifier 
Contents: 

This data idem identifies the corresponding SDS record in EF SDS4 , e.g. if this byte is coded "05" 
then this delivery report corresponds to the SDS record #5 of EF $DS4 . 

Coding: 

"(XT empty record. 

M 0I" to "FF M record number of the corresponding SDS in EF SDS4 
SDS delivery status: 

This data item contains the delivery status as defined in EN 300 392-2 [3]. 

10.3.57 EFsdsp (SDS parameters) 

This EF shall contain values for short data service header parameters, which can be used by the ME for user assistance 
in preparation of mobile originated SDS, as defined in table 74. 

The EF consists of one or more records, with each record able to hold a set of SDS parameters. The first record in the 
EF shall be used as a default set of parameters, if no other record is selected. 

To distinguish between records, an alpha identifier is included within each record, coded on X bytes. 

Table 74: Contents of SDS parameters EF 

Identifier: "6F39" | Structure: linear fixed | Optional 

Record length: 1 to X 4- 1 9 bytes [ Update activity: low 

Access Conditions: 

READ PIN1 

UPDATE PIN1 

INVALIDATE ADM 

REHABILITATE A0M 



Bytes 


Description 


M/O 


Length 


1 toX 


Alpha identifier 


M 


X bytes 


X+ 1 


Parameter indicators 


M 


1 byte 


X + 2to 
X+ 16 


Service centre address 


M 


1 5 bytes 


X+ 17 


Protocol identifier 


M 


1 byte 


X+ 18 


Data coding scheme 


M 


1 byte 


X+ 19 


Validity period 


M 


1 byte 



Storage is allocated for all the possible SDS parameters, regardless of whether they are present or absent. Any unused 
bytes, due to parameters not requiring all of the bytes, or due to absent parameters, shall be set to "FF". 

Alpha identifier 

Contents: 

Alpha tag of the associated SDS - parameter. 
Coding: 

As defined in clause 10.4.I. 
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Parameter Indicators 
Contents: 

Each of the default SDS parameters which can be stored in the remainder of the record are marked 
absent or present by individual bits within this byte. 

Coding: shall be as defined in figure 58. 

Byte X + I ; 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



[_ Service Centre address 

| Protocol Identifier 

I Data coding scheme 

I Validity period 

I I I RFU 

Bit value: 

0 - parameter present 

1 - parameter absent 

Figure 58: Coding of parameter indicators 

Service centre address: 
Contents: 

Service centre address. 
Coding: 

As defined for the message destination/source identifier in clause I0.3.42. 
Protocol Identifier: 

As defined for the protocol identifier in clause 1 0.3.42. 
Data coding scheme: 

As defined in EN 300 392-2 [3]. 
Validity period: 

As defined in EN 300 392-2 [31. 

10.3.58 EF 0 ,alsc (Dialling schemes for TETRA network) 

This EF shall contain the information indicating the dialling scheme as defined in table 75. 



9N?r>nr"> <xp 
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Table 75: Contents of Dialling schemes for TERA network EF 



Identifier. "6F46" S 


Structure: transparent 


I 


Mandatory 


File size: 5 bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length ! 


1 


Type of dialling 


M 


1 


2 


Number of digits 


M 


1 


3 to 5 


Base address 


M 


3 



Type of dialling: 

Contents: ihc type of dialling scheme to be selected. 
Coding: shall be as defined in figure 59. 
Byte I : 



b8 


b7 


b6 


b5 


M 


b3 


b2 


bi 



0 ISSI or ITS I dialling 



I 

0 
1 



FSSN Dialling 

RFU 

RFU 

RFU 



Figure 59: Coding of type of dialling 

Number of digits 
Contents: 

[n case of FSSN dialling, up to this number of digits, the number dialled has to be added to the base 
address. Else the dialling is as 1SS1/ITSI dialling. 

Coding: 1 byte 

-FF" in case of ISSI/1TS1 dialling, else number of digits. 

Base Address 

Contents: U contains the base address to which the dialled number has to be added. 
Coding: 3 bytes - used in case of FSSN dialling else set to "FF FF FF". 
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10.3.59 EF APN (APN table) 

This EF shall contain a list of APNs (IP access point names) which the ME can use to match the access point 
siring to the corresponding index which is used in the air interface (EN 300 392-2 [3|) as defined in table 76. 



Table 76: Contents of ANP table EF 



Identifier "6F3E" | 


Structure: linear fixed 


I 


Optional 


Record size: 65 bytes 


I 


Update activitv: hiah 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 to 2 


Access point name index 


M 


2 


3 to 65 


Access point name 


M 


63 



Access point name index: 

Contents: The Access point name index is used over the air interface. 

Coding: The message value is coded with two bytes as defined in EN 300 392-2 13). 
Access point name: 

Contents: The alphanumeric name the user has assigned for the corresponding access point name index. 

Coding: According to the default 8-bit alphabet ISO/1EC 8859-1 [9], 

NOTE: The access point name stored in this EF does not have to be the same as the access point name sent by 

TETRA SwM) towards the IP gateway. This is because only the access point name index is sent over the 
air interface. The SwM! maps the index to the real APN Network Identifier that is sent to the CGSN 
network element (TS 100 927 [12]). 

10.3.60 EFarr (Access Rule Reference) 

This EF shall contain the access rules for files located under the TETRA ADF in the UICC If the security attribute tag 
M 8B" is indicated in the FCP it contains a reference to a record in this file as defined in table 77. 



Table 77: Structure of EF ARR at ADF-level 



Identifier: "6F47" | 


Structure: Linear fixed 


I 


Mandatory 


Record Lcnqth: X bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
DEACTIVATE 
ACTIVATE 


ALW 
ADM 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 toX 


Access Rule TLV data objects 


M 


X bytes 



This EF contains one or more records containing access rule information according to the reference to expanded formal 
as defined in ISO/lEC 7816*9 (131- Each record represents an access rule. Unused bytes in the record are set to"FF\ 
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10.3.61 EFpni (Private Number Information) 

Each record of this EF shall contain a number structure dcfiniiion and stores the user's own private number as defined in 
tabic 77. The number structure definition allows the MS to understand the structure of different Private Number Plans 
that may be in use. This enables the MS to display the user's own private number correctly. 

The first record contains the default private number information, the other records are in descending order of priority. 
The selection of which type of Private Number Plan to use is outside the scope of the present document. 



Table 78: Contents of Private Number Information EF 



identifier: "6F CO" | 


Structure: linear fixed 


I 




Optional 


Record length: 14 bytes 


I 


Update activity: low 




Access Conditions: 






« 






READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 

PIN1/PIN2 

ADM 

ADM 










Bytes 


Description 


M/O 


Lenqth 


1 to 2 


Tier Details 


M 


| 2 


3 to 14 


Private Number 


M 


12 



Tier Details 

Contents: This field of each record defines the hierarchical structure of the private number, allowing up 
to four variable length tiers in descending order of significance. 

Coding: shall be as defined in figure 60. 

The tier lengths are binary encoded nibbles. 

The number of tiers in the hierarchy is N, where N may take the value I to 4. 

There is no absolute hierarchy, the structure is relative. For example if there arc two tiers in the 
hierarchy the first two tier fields (N and N - I) are set to the length of digits in each, the remaining 
two tiers (N - 2 and N - 3) will be set to "0". 

"00 00" - No Private Number Stored. 

"01 mn" signifies that what follows is concatenation of m digit leading number + n digit 
second number + [remainder] with unused digits padded with "P. 

EXAMPLE I : The full coding for an FSSN number "ab cdeP with 2 + 4 structure might be: 

"01 02 ab cd efFFFFFFFFFFFFFF FF. 
EXAMPLE 2: The full coding for a private number "ab cdefg hijk" with 2 + 5 + 4 structure might be: 

"01 25 ab cd ef gh ij kF FF FF FF FF FF FP. 

"01 FF" - I to 24 digit private number with no tier structure defined. 

"XX XX" - 1 to 4 tier Private number stored (where X takes the range ] " to "F hex and the 
sum of digits does not exceed 24. 

"FF FF" - No valid number follows. 



ETSI 



101 



ETSI TS 100 812-2 V2.3.1 (2003-10) 



Byte I : 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 












I I I I 



No of digits in tier N - I 
No of digits in tier N 



Byte 2: 



b8 


b7 


b6 


b5 | b4 


b3 


b2 


b) 












I I I I 



No ofdigiisiniierN-3 
No of digits in tier N - 2 



Figure 60: Coding of tier details 

Private Number 

Contents: This field of each record allows storage of a private number. 

Coding: A contiguous string of left-justified BCD encoded digiis, starting with the most significant digit 
Where the number is shorter than 24 digits the remaining digits shall be padded with M F". 

10.3.62 EFscan (Scan list files) 

This EF shall contain information concerning all the multi-group lists as defined in table 79. 

Table 79: Contents of Scan list files EF 



Identifier: "6F4D" | 


Structure: linear fixed 


I Optional 


Record size: X byte 


t 


Update activity: low 


Access Conditions: 
READ 
UPOATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 






Bytes I 


Description 




M/O 1 Lenqth 


1 to X IScan list name 


M ! x 



Scaji list name: 

Contents: Alphanumeric name for the scan list stored on the SIM. 

Coding: The value of X may range from zero to 24 1 . Coding according to the default 8-bit alphabet 
iSO/IEC8859-l [9|. 



SNSDOCIO: <XP_ 



_2345779A_I - 
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10.3.63 EFscand (Scan list data) 

This EF shall contain information related to each scan list as defined in tabic 80. There shall be a 1:1 relationship 
between each record in EF SCANO and the corresponding record in EF SCANL . 



Table 80: Contents of Scan list data EF 



Identifier. "6F4E" 


Structure: linear fixed 


I 


Optional 


Record sire: 2 x (X + 


1) bytes | 


Update activity: high 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


WO 


Lenglh 


1 


Number of groups in list 


M 


1 


2to2x(X + 1) 


Group Indexes for first group to N th group 


M 


2xX 



Number of groups in list: 
Contents: 

The number of groups in the scan list 
Coding: 

Byte I : Number of groups in list (X)- coded binary. 
Group indexes for first group to N lh group: 
Contents: 

Shall indicate for each group in the scan list, the record number of the corresponding TMO group 
in 6F CSSIS or EF GSSID- 

Coding: For each group number N in the scan list: 

Byie N x 2: 

GSSIS_GSSID_flag: 

I - from EF GSS j S . 

0- from EF CSSID . 

Byte N x 2 + I : Coded binary - shall indicate the record number of the corresponding TMO group 
in EF GSSIS or EF GSSID . 

Unused bytes shall be set to "FF'\ 



Dxicrv-v^tn- -vo 
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10.3.64 EFdmojbssis (DMO pre-programmed group numbers) 

This EF shall coniain the pre-programmed {by ihc operator or organization) group identities for DMO as defined in 
table 81. 

Table 81: Coding of DMO pre-Programmed group numbers EF 



Identifier: "6F49" 



Record length: X + 4 bytes 



Structure: lin ear fixed 

I 



Optional 



Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 



PIN1 
ADM 
ADM 
ADM 



Update activity: low 



Bytes 


Description 


WO 


Length 


1 toX 


Group name 1 


M 


X 


X+ 1 


Network address record number 


M 


1 


X + 2 to X + 4 


Group Identity (GSSI) 


M 


3 



Group name: Sec definition in EF CSS|S 
Network address record number: Sec definition in EF< 



GSSIS. 



Group Identity (GSSI): See definition in EF GSS|S . 

10.3.65 EF dmo _grds (Group related data for DMO static GSSIs) 

This EF shall coniain information related to each static DMO GSSI as defined in table 82. There shall be a 1 : J 
relationship between each record in EF omcm: j RDS and the corresponding record in EF DM0 C s Sls . 

Table 82: Contents of Group related data for DMO static GSSIs EF 



Identifier "6F4A" | 


Structure: linear fixed 


I 


Optional 


Record size: 4 + N bytes 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Key record number 


M 


1 


2 to 4 + N 


Group related data 


M 


3 



Key record number: See definition in EF GRDS file: 
Group related data: 

Class of usage (3 bits). Shall indicate the importance of the group for the user and define the participation 
rules for the groups defined with Class of usage. 

NOTE: Class of usage may be used to support scanning (multi-group) in DMO. 

Preferred DMO Air Encryption Class (2 bits): Shall indicate the preferred encryption class 
(EN 300 396-6 [7]) to be used for communication with this address. 

Minimum DMO Air Encryption Class (2 bits): Shall indicate which encryption classes 
(EN 300 396-6 [7]) may be used for communication with this address. 
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Where: 



Number of DMO radio channels for (his group: Shall indicate ihc number of radio channels this group 
point to. 

DMO radio channel index: Shall indicate record number of the corresponding DMO channel in the 
EF DM0 CH fi' c (repeated according to Number of DMO radio channels). 

Coding: shall be as defined in figure 61. 
Byte 2: 



b8 


b7 


b6 


b5 


b4 1 b3 


b2 


bl 



RFU 
RFU 
RFU 

Class of usage bit 1 
Class of usage bit 2 
Class of usage bit 3 
RFU 
RFU 



Byte 3: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



Preferred DMO Air Encryption Class bit I 

Preferred DMO Air Encryption Class bit 2 

Minimum DMO Encryption Class bit 1 

Minimum DMO Encryption Class bit 2 

RFU 

RFU 

RFU 

RFU 



Preferred Air Encryption Class: coded as defined in EN 300 396-6 [7]. 

The Preferred Air Encryption Class shall not be set to a lower priority level than the Minimum Air 
Encryption class. The order of priority is defined in EN 300 396-6 [7]. 

Minimum Air Encryption Class: coded as shown in EN 300 396-6 [7]. 

Byte 4: binary coded - Number of DMO radio channels (N). 

Byte 5 to byte 5+N- 1 : binary coded - record number of the corresponding DMO radio channel. 
NOTE: The managed DMO may override the radio channel information. 

Figure 61: Coding of group related data 



10.3.66 EF G tmo_gdmo (TMO - DMO selected group association) 

This EF shall contain information related group association from TMO selected groups to DMO selected groups as 
defined in table 83. 

There shall be a 1:1 relationship between each record in EF GTM0 gdmo an ^ corresponding record in EF GSS1S . 
NOTE: Table 83 is used only for manual switch from TMO to DMO. 
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Table 83: Contents of TMO - DMO selected group association EF 



ktentilier: -6F4B' 


Structure: linear fixed 


I 


Optional 


Record size: 1 bvte 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PINI 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


DMO Group index 


M 


1 



DMO Group Index: 

Contents: DMO Group Index: Shall indicate record number of the corresponding DMO Group in 
EF DMCLGSS!S- 

Coding: 

Byte I: binary coded. 

10.3.67 EF G dmo_gtmo (DMO - TMO selected group association) 

This EF shall contain information related group association from DMO selected groups to TMO selected groups as 
defined in table 84. 

There shall be a I: I relationship between each record in EF CDMO OTM0 and the corresponding record in EF DM0 c 
NOTE: Table 84 is used only for manual switch from DMO to TMO. 



Table 84: Contents of DMO - TMO selected group association EF 



Identifier. ,, 6F4C" [ 


Structure: linear fixed 


1 


Optional 


Record size: 1 byte 


I 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PINI 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


TMO Group index 


M 


1 



TMO Group Index: 

Contents: TMO Group Index: Shall indicate record number of the corresponding TMO Group in 
EF GSSJS- 

Coding: 

Byte I: binary coded. 

10.3.68 EFqmojdep (Default encryption parameters) 

This EF shall contain information showing air-interface encryption parameters to be used for communication with 
DMO addresses which are not specified in EF DMOGRDS (Group related data for DMO static GSSIs) as defined in 
table 85. 

NOTE: Pre-emption requests need not use these parameters. 
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Table 65: Contents of Group related data for DMO static GSSIs EF 



Identifier: "6F4F" 


Structure: Transparent 


I 


Optional 


Record size: 2 bytes 


1 


Update activity: low 


Access Conditions: 
READ 
UPDATE 
INVALIDATE 
REHABILITATE 


PIN1 
PIN1 
ADM 
ADM 








Bytes 


Description 


M/O 


Length 


1 


Key record number 


M 


1 


2 


Encryption related default data 


M 


1 



Key record number: see definition in EFqrds 

This defines the key to be used for encrypted communication with DMO addresses which arc not 
specified in EF DM0GRDS (Croup related data for DMO static GSSIs). It has no meaning for an MS 
which never uses encryption for communicating with these addresses. 

Encryption related default data: 

Preferred DMO Air Encryption Class (2 bits): shall indicate the preferred encryption class 
(EN 300 396-6) to be used for communication with DMO addresses, which are not specified in 
E p DMO_GRDS (Croup related data for DMO static GSSIs). 

Minimum DMO Air Encryption Class (2 bits): shall indicate which encryption classes (EN 300 396-6) 
may be used for communication with DMO addresses, which are not specified in EF DM0 CRDS (Group 
related data for DMO static GSSIs). 

Coding: shall be as defined in figure 62. 

Byte 2: 



Where: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



Preferred DMO Air Encryption Class bit I 

Preferred DMO Air Encryption Class bit 2 

Minimum DMO Encryption Class bit i 

Minimum DMO Encryption Class bit 2 

RFU 

RFU 

RFU 

RFU 



Preferred Air Encryption Class: coded as shown in EN 300 396-6 [7], 

The Preferred Air Encryption Class shall not be set to a lower priority level than the Minimum Air 
Encryption Class. The order of priority is defined in EN 300 396-6 [7]. 

Minimum Air Encryption Class: coded as shown in EN 300 396-6 [7]. 

Figure 62: Coding of encryption related default data 



Dmcrwm. ,vd 
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10.3.69 EFqsko ( Group Session Key) 

This EF shall coniain ihe group sealing key for OTAR (see PI clause 4.2.5 ) as defined in table 86. 



Table 86: Contents of the Group Session Key EFqsko 



Identilier "6F50 ' f Structure: linear fixed 


I 


Optional 


Record lengih: 14 bytes i Update activity: low 




Access Conditions: 








READ NEV (see note 1) 








UPDATE NEV (see note 2) 








INVALIDATE ADM 








REHABILITATE ADM 






Bytes 


Description 


M/O 


Length 


1-2 


GSKO-VN 


M 


2 


3-14 


GSKO 


M 


12 


NOTE 1: There is no access to this EF over the SIM-ME interface. 




NOTE 2: GSKO and GSKO-VN are updated on the SIM by use of the TA41/TA92 


algorithm. 







GSKO-VN: 

Contents: The version number of GSKO. 

Coding: The key shall be stored in 2 bytes according to figure 63. 
Byte I: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



]_LSB ofGCKO-VN 



Byte 2: 



b8 


b7 


b6 


b5 


b4 


b3 


b2 


bl 



MSB of GSKO-VN 

Figure 63: Coding of GSKO-VN 

GSKO: 

Contents: The Group sealing key for OTAR. 

Coding: The key shall be stored in 12 bytes according to figure 64. 
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Byte 3: 



| b8 I b7 



b6 



b5 



b4 | b3 



b2 



bl 



LSBofGSKO 



...etc. 
Byie 14: 



b8 


b7 


b6 


b5 


b4 


b3 


bl 


bl 



MSB ofGSKO 



Figure 64: Coding of GSKO 

1 0.4 Contents of the EFs at the Telecom level 

10.4.1 EFadn (Abbreviated dialling numbers) 

This EF shall contain Abbreviated Dialling Numbers (ADN) and/or Supplementary Service Control strings (SSC). In 
addition it contains identifiers of associated network/bearer capabilities and identifiers of extension records. It may also 
coniain an associated alpha-tagging. 

For contents and coding see TS 1 00 977 [5). 

10.4.2 EFfdn (Fixed dialling numbers) 

This EF shall contain Fixed Dialling Numbers (FDN) and/or Supplementary Service Control strings (SSC). In addition 
it contains identifiers of associated net work/bearer capabilities and identifiers of extension records. It may also coniain 
an associated alpha-tagging. 

For contents and coding see TS 1 00 977 [5]. 

10.4.3 EF M sisdn (MSISDN) 

This EF shall coniain MSISDN(s) related to the subscriber. In addition it contains identifiers of associated 
network/bearer capabilities and identifiers of extension records. It may also contain an associated alpha-lagging. 

For contenis and coding see TS 1 00 977 [5]. 
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10.4.4 EF LND (Last number dialled) 

This EF shall comain ihe last numbers dialled (LND) anoVor ihe respective supplementary service control strings (SSC) 
In addition it contains identifiers of associated network/bearer capabilities and identifiers of extension records . h may 
also contain associaied alpha-tagging. 

For contents and coding see TS 1 00 977 [5]. 

10.4.5 EFsdn (Service Dialling Numbers) 

This EF shall contain special service numbers (SDN) and/or the respective supplementary service control strings (SSC). 
In addiiion it contains identifiers of associaied network/bearer capabilities and identifiers of extension records. It may 
also contain associated alpha- tagging. 

For contents and coding see TS 1 00 977 (5]. 

10.4.6 EFexti (Extension-!) 

This EF shall contain extension data of an ADN/SSC, an MSISDN, or an LND. Extension data is caused by: 

an ADN/SSC (MSISDN, LND) which is greater than the 20 digit capacity of the ADN/SSC (MSISDN, LND) 
Elementary File or where common digits are required to follow an ADN/SSC string of less than 20 digits. The 
remainder is stored in this EF as a record, which is identified by a specified identification byte inside the 
ADN/SSC (MSISDN, LND) Elementary File. The EXTI record in this case is specified as additional data; 

an associated called parly subaddress. The EXTI record in this case is specified as subaddress data. 

For contents and coding see TS 100 977 [5]. 

10.4.7 EF EXT2 (Extension2) 

This EF shall contain extension data of an FDN/SSC (see EXT2 in clause 1 0.4.2). 
For contents and coding see TS 1 00 977 [5]. 

1 0.4.8 EF EXT3 (Extension3) 

This EF shall contain extension data of an SDN (see EXT3 in clause 10.4.5). 
For contents and coding see TS 100 977 [5], 

10.5 Files of TETRA 

This clause contains a figure depicting the file structure of the SIM. DF TETRA shall be selected by using the identifier 
M 7F90'\ 
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MF 
*3F00" 



TETRA 
7F90" 



TELECOM 
7F10- 



EF DIR 




EF ICCID 




EF LP 


"2F0O" 




»2FE2» 




•2F05" 



EF ADN 
"6F3A" 




EF FDN 

••6F3B" . 




EF MSISDN 
"6F40" 








I 


I 


I 


EF EXT1 
"6F4A" 




EF EXT2 
-6F4B" 




EF EXT3 
"6F4C" 



EF LND 
»6F44" 



EF SDN 
"6F49" 





EF SST 
-6?01" 




EF ITSI 
"5F02- 




E? ITSTDTS 
-6F03" 




EF UNAME 
"6F04" 




EF SCT 
-6F05- 




EF PHASE 






V 




I I I I I I 




EF CCK 
"6F07" 




SF CCiCUOC 
n 6F0a n 




EF SCK 
"6F09- 




EF GSSIS 
"6F0A" 




EF GRDS 
"6 FOB" 




EF GSSID 
"6FOC" 










l I I I 




I 


EF GRDD 
"6F0D- 




EF GCK 
n 6F0E" 




EF MGCK 
"6F0P" 




EF GINFO 
"eFlO" 




EF SEC 
-6F11* 




EF FORBID 
-6F12" 












I I I 




I 




I 




i 




EP PREF 
"6F13" 




EF SPN 
"6F14- 








EF DNWRK 
"6F16" 




EF NWT 
"6F17" 




EF GWT 
"6F18" 








I 




I 




i 




l 




t 




- I 




EF CMT 
"6F19" 




ef adngwt 
"6f:a* 




EF EXT1 
" 6F1B" 




EF ADNTETRA 
"6?1C" 




EF EXTA 
"6P1D" 




. EF FDNGWT 
n 6F IE* 












I 




i 




I 




I 




I 




I 




E? EXTA 




EF FDNTETRA 




SF EXTB 




SF LNDGWT 




EF LNDTETRA 




2,F SDNGVTT 
"6F24" 


"6F1F" 


"6F20" 




"6F21" 




"6F22" 


"6F23" 














I I 




I 




I 




I 




I 


EF EXT3 
"6F25* 




EF SDNTETRTA 
-6F26" 




EF STXT 
"6P27" 




EF MSGTXT 
'6F28" 




EF SDS123 
"6F29" 




EF SDS4 
,, 6r2A" 
























I 




I 




I 




I 




I 




I 




EF MSGEXT 
"6F2B" 




EF EADDR 
"6F2C- 




EF EINPO 
*6F2D" 




EF CMOCh 
"6F2B" 




EF MSCh 
"6F2F" 




EF KH 
"6F30" 














I I 




I I 




I I 


EF REPGATE 
"6F31" 




EF AD 
"6F32" 




EF PREF_LA 
"6F33" 




2P LNDComp 
"6F34* 




E? D?LTSTGT 
"6F35" 




EF SDS4MEMST 
ATUS 
"SF36" 










I I I 




I I I 




EF WELCOME 
-6F37" 




EF SDSR 
"6F3S" 




EF SDSP 
"6F39" 




EF DIALSC 
•6F46" 




E? ARR 
"6F4 7" 




EF DMO^GSSIS 
"6?49' 




I I I I 




I I 




EF DMO_GRDS 
'^FlA" 




EF GTMO_GDMO 
"6F4B" 




EF GDMO_GTMO 
'"6F4C" 




EF SCAW 
•6F4D" 




EF SCAND 
"6F4E" 




EF DMO_DEP 
"SF4F" 








I I I I I I 




EF PNI 
-6FC0" 























Figure 65: File identifiers and directory structures of TETRA 
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1 1 Application protocol 



The SIM interfaces with appropriate terminal equipment (ME) when in TETRA administrative mode. These operations 
are outside the scope of the present document. 

During TETRA network operations the SIM exchanges messages with the ME via the SIM/ME interface. A message 
can be a command or a response as follows: 

• a TETRA command/response pair is a sequence consisting of a command and the associated response; 

• a TETRA procedure consists of one or more TETRA command/response pairs which arc used to perform all or 
part of an application-oriented task. A procedure shall he considered as a whole, that is to say that ihc 
corresponding task is achieved if and only if the procedure is completed. The ME shall ensure thai, when 
operated according to the manufacturer's manual, any unspecified interruption of the sequence of 
command/response pairs which realize the procedure, leads to the abortion of the procedure itself; 

• a TETRA session of the SIM in the TETRA application is the interval of time starting at the completion of the 
SIM initialization procedure and ending either with the start of the TETRA session termination procedure, or 
at the first instant the link between the SIM and the ME is interrupted. 

During the TETRA network operation phase, the ME plays the role of the master and the SIM plays the role of the 
slave. 

The list of procedures at the SIM/ME interface in TETRA network operation are listed in the following table: 
The ME automatically initiates some procedures. They are marked "ME U . 

NOTE 1: Some procedures at the SIM/ME interface require MM! interactions. The following descriptions do not 
intend to infer any specific implementation of the corresponding MMI. When MM1 interaction is 
required, it is marked "MMI'\ 

NOTE 2: Some procedures arc not clearly user dependent. They are directly caused by the interaction of the MS 
and the network. Such procedures are marked NET work "(NET)". 



General Procedures: 

Reading an EF 

Updating an EF 
SIM management procedures: 

SIM initialization 

TETRA session initialization 

TETRA session termination 

Language preference request 

Administrative information request 

SIM service table request 

SIM phase request 

SIM presence detection 
PIN related procedures: 

PIN verification 

PIN value substitution 

PIN disabling 



ME; 
ME. 

ME 

ME; 
ME: 
ME; 
ME: 
ME: 
ME: 
ME. 

MMI 
MM! 
MMI 
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PIN enabling 


MMl: 


PIN unblocking 


MMI. 


TETRA security related procedures: 




TETRA algorithms computation 


NET; 


TETRA key compulation (SCK. DCK, MGCK, GCK)NET; 


ITSI request 


NET; 


ITSI disabling 


NET; 


Location Information 


NET: 


Broadcast network information 


NET; 


Forbidden networks information 


NET. 



Subscription related procedures: 

Usernamc MMI; 
Subscriber class request ME: 
Group information MM1/NET; 
User's group information ME/NET; 
Call modifiers NET/ME; 
Network information ME; 

Dialling Numbers (ADN, ADNTETRA, ADNGWT, FDN, FDNTETRA, FDNGWT, LND, LNDTETRA, 
LNDGWT, SDN, SDNTETRA, SDNGWT LNDComp) MM1/ME; 

SDS messages {Message texts, SDS123 and SDS4) MMI; 

Preferred networks MMI; 

Service Provider Name (SPN) ME; 

1CCID ME; 

Emergency addresses ME/MMI. 

11.1 General procedures 

11.1.1 Reading an EF 

The ME selects the EF and sends a READ command. This contains the location of the data to be read. If the access 
condition for READ is fulfilled, the SIM sends the requested data contained in the EF to the ME. If the access condition 
is not fulfilled, no data will be sent and an error code will be returned. 

11.1.2 Updating an EF 

The ME selects the EF and sends an UPDATE command. This contains the location of the data to be updated and the 
new data to be stored. If the access condition for UPDATE is fulfilled, the SIM updates the selected EF by replacing the 
existing data in the EF with that contained in the command. If the access condition is not fulfilled, the data existing in 
the EF will be unchanged, the new data will not be stored, and an error code will be returned. 

In some cases, files arc updated by running an algorithm resident on the SIM. 
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11.1,3 Invalidating an EF 



The ME selects the EF and sends an INVALIDATE command, 
the EF is invalidated. 



ETSI TS 100 812-2 V2.3.1 (2003-10) 
If the access conditions of INVALIDATE arc fulfilled 



1 1 .2 SIM management procedures 

The procedures listed in this clause are required for execution of the procedures in clauses 1 1.3, 1 1.4 and 1 1 .5. 

11.2.1 SIM initialization 

The ME runs the language request procedure. If none of the indicated languages are available, ihe ME selects a default 
language (e.g. English). 

1 1 .2.2 TETRA session initialization 

Following the SIM initialization, the ME selects DFtctra by using the identifier or by the path given in EF DIR . The 
ME then selects £F (TSI to obtain its INVALIDATION status. If the ITSI is invalidated the ME informs the user and the 
TETRA session initialization fails. 

The ME runs the PIN verification procedure for PIN1 as defined in clause 1 1.3.1. If the PIN verification is 
unsuccessful, the TETRA session initialization fails. 

If the PIN verification procedure is performed successfully, the ME then runs the following procedures: 

• Administrative information request; 

• SIM Phase request; 

• SIM Service Table request; 

• ITSI request; 

• ITSI temporarily disabled enquiry; 

• Subscriber class request; 

• Preferred networks request; 

• Location Information request; 

• Mutual authentication requirement request; 

• Forbidden networks request; 

• Interrupted emergency call request. 

After the SIM initialization has been completed successfully, the MS is ready for a TETRA session. 

NOTE: If the ITSI is "Temporary disabled by SwMI", the ME enters a TETRA session with a restricted mode of 
operation. The restricted TETRA session usually consists of the MS simply listening to the SwMI to 
eventually detect a re-enabling of the ITSI by the network (see EN 300 392-7 [41). 

1 1 .2.3 TETRA session termination 

The ME terminates the TETRA session as follows: 

The ME runs all the procedures that are necessary to transfer the following subscriber related information to the SIM: 
As soon as the SIM indicates that these procedures are completed, the ME/SIM link may be deactivated. 
Finally, the ME deletes all these subscriber related information elements from its memory. 
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NOTE I: This procedure is not to be confused with ihe deactivation procedure. 

NOTE 2: If the ME has already updated any of the subscriber related information during the TETRA Session, and 
the value has not changed until TETRA session termination, the ME may omit the respective update 
procedure. 

1 1 .2.4 Language preference request 

• Request: The ME performs the reading procedure with EF LP . 

• Update: The ME performs ihe updating procedure with EF LP . 

1 1 .2.5 Administrative information request 

• Request: The ME performs the reading procedure with EF AD . • 
Update: The ME performs the updating procedure with EF AD . 

1 1 .2.6 SIM service table request 

The ME performs the reading procedure with EF SST . 

1 1 .2.7 SIM phase request 

The ME performs the reading procedure with EF HHAS£ 

1 1 .2.8 SIM presence detection 

As an additional mechanism, to ensure that the SIM has not been removed during a card session, the ME sends, at 
frequent intervals, a STATUS command during each call. A STATUS command shall be issued within all 30 second 
periods of inactivity on the S1M-ME interface during a call. Inactivity in this case is defined as starting at the end of the 
last communication or the last issued STATUS command. If no response data is received to this STATUS command, 
then the call shall be terminated as soon as possible but at least within 5 seconds after the STATUS command has been 
sent. If the DF indicated in response to a STATUS command is not the same as thai which was indicated in the previous 
response, or accessed by the previous command, then the call shall be terminated as soon as possible but at least within 
5 seconds after the response data has been received. This procedure shall be used in addition to a mechanical or other 
device used to detect the removal of a SIM. 

1 1 .2.9 SIM card number request 

The ME performs the reading procedure with EF, CCID . 

1 1 .2.1 0 Common Cipher Key request 

The ME performs the read procedure with EF CCK to obtain the current record in this EF. 

1 1 .3 PIN related procedures 

The procedures listed in this clause are mandatory. 

A successful completion of one of the following procedures grants the access right of the corresponding PIN for the 
TETRA session. This right is valid for all files within the applicaiion(s) protected by this PIN. 

After a third consecutive presentation of a wrong PIN to the SIM. not necessarily in the same TETRA session, the PLN 
status becomes "blocked" and the access right previously granted by this PIN is lost immediately. 

An access right is not granted if any of the following procedures are unsuccessfully completed or aborted. 
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11.3.1 PIN verification 

The ME checks the PIN status. 

In the case of PIN1 the following procedures applies: 

• if the PINl status is "blocked", and PINl is "enabled" the procedure ends and is finished unsuccessfully. 

• If the PINl status is "blocked" but PINl is "disabled", the procedure ends and is finished successfully. The ME 
shall, however, accept SIMs which do not grant access rights when PINl is "blocked" and "disabled". In that 
case ME shall consider those SIMs as "blocked"; 

• If the PIN status is not "blocked*, but PINl is "disabled", the procedure is finished successfully. 

• If the PIN I status is not "blocked" and PIN I is "enabled", the ME uses the VERIFY PIN I function. If the 
PIN I presented by the ME is equal to the corresponding PIN I stored in the SIM, the procedure is finished 
successfully. If the PINl presented by the ME is not equal to the corresponding PINl stored in the SIM, the 
procedure ends and is finished unsuccessfully. 

In the case of PIN2 the following procedure applies: 

• if the PIN2 status is "blocked", the procedure ends and is finished unsuccessfully; 

• if the P1N2 status is not "blocked", the ME uses the VERIFY PIN function. If the PIN2 presented by the ME is 
equal to the corresponding PIN2 stored in the SIM, the procedure is finished successfully. If the PIN2 
presented by the ME is not equal to the corresponding PIN2 stored in the SIM, the procedure ends and is 
finished unsuccessfully. 

1 1 .3.2 PIN value substitution 

The ME checks the PIN status. If the PIN status is "blocked" or "disabled", the procedure ends and is finished 
unsuccessfully. 

If the PIN status is not "blocked" and the enabled/disabled indicator is set "enabled", the ME uses the CHANGE PIN 
function. If the old PIN presented by the ME is equal to the corresponding PIN stored in the SIM, the new PIN 
presented by the ME is stored in the SLM and the procedure is finished successfully. 

If the old PIN and the PIN in memory are not identical, the procedure ends and is finished unsuccessfully. 

11.3.3 PIN disabling 

Requirement: Service no.l "available". 

The ME checks the PINl status. If the PINl status is "blocked", the procedure ends and is finished unsuccessfully. 

If the PINl status is not "blocked", the ME reads the PINl enabled/disabled indicator. If this is set "disabled", the 

procedure ends and is finished unsuccessfully. 

If the PIN I status is not "blocked" and the enabled/disabled indicator is set "enabled", the ME uses the DISABLE PIN 
function. If the PINl presented by the ME is equal to the PINl stored in the SIM, the status of PINl is set "disabled" 
and the procedure is finished successfully. If the PIN I presented by the ME is not equal to the PIN I stored in the SIM, 
the procedure ends and is finished unsuccessfully. 

This requirement applies to the PIN I at dm TETRA application level. For the PIN 1 at the master file level, it only 
applies in the case of a TETRA only card. 

11.3.4 PIN enabling 

The ME checks the PIN I status. If the PIN 1 status is "blocked", the procedure ends and is finished unsuccessfully. 

If the PIN I status is not "blocked", the ME reads the PIN I enabled/disabled indicator. If this is set "enabled", the 
procedure ends and is finished unsuccessfully. 
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If Ihc PIN1 status is not "blocked" and the enabled/disabled indicator is set "disabled", the ME uses the ENABLE PIN 
function. If the PIN I presented by the ME is equal lo the PIN I stored in the SIM, the status of PIN I is set -enabled" and 
the procedure is finished successfully. If the PIN presented by the ME is not equal to the P1N1 stored in the SIM, the 
procedure ends and is finished unsuccessfully. 

11.3.5 PIN unblocking 

The execution of the PIN unblocking procedure is independent of the corresponding PIN status, Le. being blocked or 
not. 

The ME checks the UNBLOCK PIN status. If the UNBLOCK PIN status is "blocked", the procedure ends and is 
finished unsuccessfully. 

If the UNBLOCK PIN status is not "blocked", the ME uses the UNBLOCK PIN function. If the UNBLOCK PIN 
presented by the ME is equal to the corresponding UNBLOCK PIN stored in the SIM. the relevant PIN status becomes 
"unblocked" and the procedure is finished successfully. If the UNBLOCK PIN presented by the ME is not equal to the 
corresponding UNBLOCK PIN stored in the SIM, the procedure ends and is finished unsuccessfully. 

1 1 .4 TETRA security related procedures 

The procedures listed in this clause are only executable if the associated services, which are optional, are provided in 
the SIM. However, if the procedures are implemented, they shall be in accordance with the requirement staled in this 
clause. If a procedure is related to a specific service indicated in the SIM service table, it shall only be executed if the 
corresponding bit denoting this service as "available" (see EF SST ). In all other cases this procedure shall not start. 

The SIM security procedures are associated with the air interface message exchange protocol procedures for 
authenticating the SIM to a TETRA network and the TETRA network to the SlM^During these SIM security 
procedufes the card runs the specified algorithms TAl 1/12 and TA21/22 to calculate respectively the expected response 
from the SIM, (X)RES! with its associated derived cipher key DCKl and the expected response from the SwMl, 
(X)RES2 with its associated derived cipher key DCK2. 

On successful authentication the derived cipher key DCK, used for encrypting air interface signalling and traffic 
channels, shall be derived from its two parts DCK I and DCK2 by running the TB4 algorithm. 

All the algorithms shall not be executable unless DF TETRA has been selected as the Current Directory and a successful 
PIN verification procedure has been performed (see clause 1 1.3.1). 

The procedures arc cither initiated by the ME (internal applications or MM I) or interfaced from the SwMI via the ME, 
In the latter case the ME provides only a delivery service with no other functionality than to interpret the PDUs if 

necessary. 

1 1 .4.1 Authentication procedures and generation of DCK 

1 1 .4.1 .1 Mutual authentication requirement request 

The SIM performs the read procedure with EF SEC to determine whether a mutual authentication is requested by the SIM 
in case of a SIM authentication request from the SwMI. 

1 1 .4. 1 .2 SIM authentication 

The ME runs the TAl 1/12 ALGORITHM, followed by a GET RESPONSE to obtain the RES I. If and only if the SIM 
requests a mutual authentication (see clause I 1.4.1.1), the ME runs then the GET CHALLENGE, followed by the 
TA2I/22 ALGORITHM. If the authentication was successful, it finally runs the TB4 ALGORITHM to obtain DCK. 

1 1 .4. 1 .3 SwMI authentication 

The ME runs the GET CHALLENGE function, followed by the TA21/22 ALGORITHM. If and only if the SwMI 
requests a mutual authentication, the ME runs the TAl I/I2 ALGORITHM, followed by a GET RESPONSE to obtain 
the RESL If the authentication was successful, it finally runs the TB4 ALGORITHM to obtain DCK. 
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1 1 .4.2 TETRA OTAR key computation (CCK, GCK, SCK) 

The CCK, GCK and SCK cipher keys can be updated by OTAR. They are sent over the air interface in sealed format 
and need to be unsealed on receipt by algorithms on the SIM. 

SCK and CCK are accessible from the SIM-ME interface but GCK is accessible only in modified format (MGCK). 

11.4.2.1 CCK distribution 

On receipt of a new SCCK from the SwMI, the ME checks the validity of the CCK-ID received from the SwMI, 
calculates the record number to be updated and then runs the TA32 ALGORITHM to update EF CCK . 

1 1 .4.2.2 CCK changeover 

When the ME detects a new CCK-ID in use it determines the record number in EF CCK which contains the new 
CCK-ID. 



1 1 .4.2.3 GCK distribution 

The ME analyses EF CSSIS and EF GSSID to locate the required GTSI. If the GTS1 is not already present, the ME 
allocates a free record number in the EF CSS|L) and there places the new GTSI. 

The ME checks whether there is a GCK (and MGCK) associated with the GTSI by accessing the appropriate GCK 
record number data element in EF CRDS or EF CRDD . If there is no such associated GCK, then a free record in EF GCK is 
allocated (see note below), and the corresponding target record number in EF GRDS or EF CRDD is updated accordingly. 

In the cdse where there was already a GCK (and MGCK) present, the ME identifies whether the new GCK-VN is valid 
by comparing it to the GCK-VN being stored currently in the appropriate record of EF MCCK . If it is not valid the 
procedure is aborted. 

The ME then runs the TA82 ALGORITHM to update the respective GCK. After this, the ME runs the TA7 1 
ALGORITHM on this particular GCK to obtain the corresponding MGCK. For this operation, the current CCK (the one 
being indicated on the broadcast channel) is used. 

NOTE: To allocate a free record in EF CCK the ME reads EF CRDS and EF GRDD and works out if there is a record 
in EF^k which is not presently pointed to by any GCK record pointer. 



11.4.2.4 SCK distribution 

On receipt of a new SSCK from the SwMI, the ME identifies whether the new SCK-VN is valid by comparing it to the 
one being stored currently. If it is noL valid the procedure is aborted. Then the ME runs the TA4I/52 ALGORITHM in 
order to unseal the SCK and store it in that record of EF SCK , which is indicated by the SCKN. 

11.4.3 ITSI request 

The ME performs the reading procedure with EF |TS |. 



1 1 .4.4 ITSI disabling/re-enabling 

See also EN 300 392-7 [4 J. 
Permanent disabling: 

On receiving the ITSI permanent disable command the ME selects EF ITS , and shall then immediately run 
the SwMI authentication procedure defined in clause 1 1.4.1.3. If the SwMI is successfully authenticated 
then the invalidate procedure is performed on EF, TS ,. The TETRA session is immediately terminated 
(see note). 
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Temporary disabling: 

On receiving ihe ITSI temporary disable command the ME selects EF ITSID!S and shall then immediately 
run the SwM! authentication procedure defined in clause U .4. 1 .3. If the SwM! is successfully 
authenticated then the ME performs the update procedure with EFjjsidis to set the flag to "temporarily 
disabled" (see noic). 

Re-enabling: 

On receiving the ITSI enable command the ME selects EF, TSlDIS and shall then immediately run the 
SwMI authentication procedure defined in clause 1 1. 4. 1 .3. If the SwMI is successfully authenticated then 
the updating procedure is performed on EF, TSlDIS to set the flag io "not disabled". 

NOTE: It is an implementation issue for the SIM to deny access to further sensitive EFs (such as group identities 
and air interface encryption keys) if the ITSI is temporarily or permanently disabled. 

1 1 .5 Subscription related procedures 

The procedures listed in this clause are only executable if the associated services, which arc optional, arc provided in 
the SIM. However, if the procedures are implemented, il shall be in accordance with the requirement stated in this 
clause. If a procedure is related to a specific service indicated in the SIM service table, il shall only be executed if the 
corresponding bit denoting this service as "available" (see EF SST ). In all other cases this procedure shall noi start. 

1 1 .5.1 Username request 

• Requirement: Service no. 16 "available". 

• Request: The ME performs the reading procedure with EF UNAME . 

• Update: The ME performs the updating procedure with EF UNAMF . 

1 1 .5.2 ITSI temporarily disabled enquiry 

• Request: The ME performs the reading procedure with EF, TS1D | S . 

• Update: The ME performs the updating procedure with EFrrs,^. 

1 1 .5.3 Subscriber class request 

• Request: The ME performs the reading procedure with EF SCT . 

• Update: The ME performs ihe updating procedure with EF SCT . 



11.5.4 Void 

1 1 .5.5 Group identity information 

The following procedures apply to both static (EF CSSIS ) and dynamic (EF GSS|D ) groups with the exceptions mentioned 
in the following clauses. 

11.5.5.1 Static Group identity information 

Request: The ME performs the reading procedure with EF GSS1S . 
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1 1 ,5.5.2 Dynamic Group identity information 

• Request: The ME performs ihe reading procedure with EF GSSH> 

• Erasure: The ME identifies the record in EF GSS1D containing the GSSID lo be erased and marks ii as 

free. 

Update/invalidate: 

The ME selects EF GSSID and shall then immediately run the SwMI authentication procedure defined in 
clause II .4. 1 .3. If the SwMI is successfully authenticated then the update or invalidate procedure is 
performed on EF GSS)D . 

The update and erasure of EF GSSJ0 requires the updating of the network table. The handling procedures of the network 
tahle (EF NWT ) are defined under clause 1 1 .6. 

1 1 .5.6 Group related data 

The following procedures apply to both sialic and dynamic group related data (EF CRDS and EF GRDD ). 

• Request: The ME performs the reading procedure wiih EF GRDS or EF GRDD . 

• Update: The ME performs the updating procedure with EF CRDS or EF GRDD . 

NOTE: A record in EF GRDS or EF GRDD is free when the associated record in EF GSS1S or EF CSS1D is marked free. 

1 1 .5.7 User's group information 

• Request: The ME performs the reading procedure with EF G(NF0 . 

• Update: The ME performs the updating procedure with EF GINF0 . 

The update of the file is performed in ihe beginning of a group call. 

The update of this file requires the updating of the network table. The handling procedures of the 
network table (EF NWT ) are defined under clause 1 1.6. 

11.5.8 Call modifiers 

• Requirement: Service no.26 "available**. 

• Request: The ME performs the reading procedure with EF CMT . 

• Update: The ME performs the updating procedure with EF CMT . 

1 1 .5.9 Service Provider Name 

• Requirement: Service no. 14 "available". 

• Request: The ME performs the reading procedure with EF SPN . 

11.5.10 DMO channel procedures 

• Requirement: Service no.27 "available". 

• Request: The ME performs the reading procedure with EF DM0Gh . 

• Update: The ME performs the updating procedure with EF DM0Ch . 
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• Erasure: The ME erases ihe contents of ihc record in EF DM0Ch by filling the record with *FF. 

11.5.11 Emergency addresses 

• Request: The ME performs the reading procedure with EF EAf)DR . 

• Update: The ME performs the updating procedure with EF EADDR . 

• Erasure: The ME erases the contents of the record in EF EADDR by filling the hi to M in the record 

with I. 

1 1 .5.1 2 Interrupted emergency call request 

• Request: The ME performs the reading procedure with EF E1NF0 . 

• Up<j, . The ME performs the update procedure with EF ElNF0 . 

NOTE: II an emergency call was in progress when the ME was powered down the current emergency call record 
number, if non-zero, indicates that an emergency call procedure was in progress when the ME was 
powered down. The ME should recognize the non-zero value as an indication to take action as necessary 
to restart the emergency call after authentication. 

1 1 .6 Network related procedures 

• Request: The ME performs the reading procedure with EF NWT . 

• Update: The ME checks whether the network address to be stored is already present. 

If so, the record pointer counter of the found network address record is increased by one. 

If the address is not found on the network table, a new record is added to the network table 
and the corresponding record pointer counter is set to one. 

• Erasure: The record on the network table is deleted (indicated as free by filling it with M FF*s). 

11.6.1 Forbidden networks 

• Request: The ME performs the reading procedure with EF F0RBID . 

• Update: The ME performs the updating procedure with EF F0RBlD . 

• Erasure: The ME can erase the whole contents of the Forbidden networks. Hie action can cither be 

initiated by the ME or the MML In case of erasure, the whole table of Forbidden addresses 
will be erased i.e. marked free by filling them with "FF H s. 

1 1 .6.2 Preferred networks 

• Requirement: Service no. 1 5 "available". 

• Request: The ME performs the reading procedure with EF PREF . 

• Update: The ME performs the updating procedure with EF PREP 
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1 1 .7 Dialling number related procedures 

The procedures listed in ihis clause are only executable if the associated services, which are optional, are provided in 
(he SIM. However, if the procedures are implemented, ii shall be in accordance wiih the requirement stated in ihis 
clause. If a procedure is related to a specific service indicated in the SIM service table, it shall only be executed if the 
corresponding bit denoting this service as "available" (sec EF SST ). In all other cases this procedure shall not start. 

1 1 .7. 1 Dialling numbers under DF TETRA 

The following procedures may be applied to 6F ADNGWT and iis associated extension file EF CWTEXT| as described in 
the procedures below. The procedures also refer to EF FDNCWT , EF^^ EF S0NCW EF ADNTCTRA , EF FDNTCTRA , 
ef lndtetka and ef sdntetra and iheir associated extension files. If these flics are not available, as denoted in the 
SIM service table, the current procedure shnll be aborted and the appropriate EFs shall remain unchanged. 

As an example, the following procedures are described as applied to ADNGWT. 

• Requirement: Service no.3 "available". 

• Request: The ME sends the identification of the information to be read. The ME shall analyse the 

data of EF ADNCWT (see clause 1 0.3.26) to ascertain whether additional data is associated 
in EF CWTEXTl . If necessary, the ME performs the reading procedure on EF GWTEXTI and 
EF GWT to assemble the complete ADNGWT. 

• Update: The ME analyses and assembles the information to be stored as follows: 

i) the ME identifies the record containing the Name to be updated; 

ii) the dialling number (and/or Supplementary service access string in case of ADNTETRA) shall be allocated to 
the bytes of the EF as follows: 

If the dialling number contains 1 6 or less "digits", it shall be stored in "number". 

If the dialling number contains more than 16 "digits", the procedure shall be as follows: 

The ME seeks for a free record in EF CWTEXTI . If no Extension I record is marked as "free", the 
procedure is aborted. 

When a free Gateway Extension I record is found, the first 16 "digits" arc stored in the "number". The 
value of the "Length of number contents" is set to the maximum value, which is 16. The Gateway 
Extension I record number in EF ADN0WT is coded with the associated record number in the EF GwTEXT1 . 
^ The remaining digits are stored in the selected Gateway Extension 1 record. The first byte of the Gateway 
Extension I record is set with the number of digits of the remaining data. Further gateway extension 
records can be added up to the full length of the dialling string by chaining records in Gateway 
Extension I. The total number of digits is the sum of the "Length of number contents" of EF ADNGWT and 
byte 2 of all associated chained Gateway Extension 1 records containing data; 

Example or a chain of gateway extension records being associated to an ADNGWT or LNDGWT is presented 
in figure 66. The Gateway Extension 1 record number of ADNGWT or LNDGWT is set to 3. 

No oi Record Extension Data Next Record 
Record 3 xx xx "06" > , 

Record 4 xx xx "xx* j 

Record 5 xx xx "FF" < ( | 

Record 6 xx xx "05* > 1 < 1 



Figure 66: Gateway extension chain 
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iii) the ME seeks ihe gateway address in EF 0VVT . If it is not already in the table a new entry is created. If a new 
entry cannot be created, the procedure is aborted. When the entry is available the ME updates ihe Gateway 
address record number in EF ADNGWT to the associated record in EF GWT ; 

i v) the ME chooses a proper call modi fier in EF CMX . 

When i). it), iii) and iv) have been successfully executed the ME performs the updating procedure with EF ADNGNV r r . 

NOTE: If the SIM does noi have available empty space to store the received ADN, or if the procedure has been 
aborted, the ME advises the user. 

Erasure: The ME sends the identification of the information to be erased. The content of the identified 

record in EF ADNGWT is marked as "free 0 . Furthermore, the associated records in EF Gwr and 
EFgwteXTI aro updated accordingly. 

1 1 .7.2 Dialling numbers under DF TELEC0M 

The following procedures may be applied lo EF ADN and its associated extension file EF^jj as described in the 
procedures below, and also to EFp^, EF^q, EF sdn and their associated extension files. If these files are not 
available, as denoted in the SIM service table, the current procedure shall be aborted and the appropriate EFs shall 
remain unchanged. 

As an example, the following procedures are described as applied to ADiN. 

• Requirement: Service no. 36 "available". 

• Request: The ME sends the identification of the information to be read. The ME shall analyse the 

data of EF ADN (sec clause 1 0.4. 1 ) to ascertain whether additional data is associated in 
EF EXT| . If necessary, the ME performs the reading procedure on EF EXT | and reading of 
default gateway SSI from EF GWT to assemble the complete ADN. 

• Update: The ME analyses and assembles the information to be stored as follows (subscriber has 

chosen to store ADN to the general EF ADN under DFTELECOM): 

i) the ME identifies the record containing the Name to be updated; 

ii) the dialling number shall be allocated to the bytes of the EF as follows: 

if a is found, the TON identifier is set lo "International"; 

if the dialling number contains 20 or less "digits", it shall be stored in "Dialling Number/SSC String"; 

if the dialling number contains more than 20 "digits", the procedure shall be as follows: 

The ME seeks for a free record in EF^-p. If no Extension I record is marked as "free", the procedure is 
aborted. 

When a free Extension 1 record is found, the first 20 "digits" are stored in the Dialling Number/SSC 
String. The value of the "Length of BCD number/SSC contents" is set to the maximum value, which is 
1 1. The Extension I record number in EF ADN is coded with the associated record number in the EF EXTJ . 
The remaining digits are stored in the selected Extension! record. The first byte of the extension data in 
E^exti (second byte of Extension 1 record) is set with the number of digits of the remaining data. 
Further extension records can be added up to the full length of the dialling string by chaining records in 
Extension I. The total number of digits is the sum of the "Length of BCD number/SSC contents" of 
EF ADN and byte 2 of all associated chained extension data records containing data: 
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iii) If a called party subaddress is associated to the ADN/SSC ihe procedure shall proceed as follows: 

If the length of the called party subaddress is less than or equal to 1 1 bytes (see TS I00 940 [I l] for coding): 

the ME seeks for a free record in EF EXTi. If an Extension l record is not marked as -free", the ME runs 
the Purge procedure. If an Extension I record is still unavailable, the procedure is aborted; 

the ME stores the called party subaddress in the Extension I record, and sets the Extension! record type 
to "called party subaddress". 

If the length of the called party subaddress is greater than 1 1 bytes (see TS 100 940 [I )] for coding): 

the ME seeks for two free records in EF EXT |. If no such two records are found, the ME runs the Purge 
procedure. If two Extension I records are still unavailable, the procedure is aborted; 

the ME stores the called party subaddress in the two Extension I records. The identifier field in the 
Extension l record containing the first part of the subaddress data is coded with the associated EF EXTJ 
record number containing the second part of the subaddress data. Both Extension! record types are set to 
"called party subaddress". 

Once i), ii), and iii) have been considered the ME performs the updating procedure with EF ADN . If the SIM has no 
available empty space to store the received ADN/SSC, or if the procedure has been aborted, the ME advises the user. 

• Erasure: The ME sends the identification of the information to be erased. The content of the 

identified record in EF ADN is marked as "free". Furthermore, the associated records in 
EF EXT | are updated accordingly. 

• Purge: The ME shall access each EF which references EF EXTI (EF EXT ,) for storage and shall 

identify records in these files using extension data (additional data or called party 
subaddress). Note that existing chains have to be followed to the end. All referred 
Extension I (Extension2) records are noted by the ME. All Extension! (Extension2) records 
not noted are then marked by the ME as "free". 

1 1 .7.3 FDNGWT specific procedures 

Requirement: Service no. 5 "available". 

If FDN is enabled (i.e. EF ADNGNVT is invalidated or not present) the ME shall operate in a restricted mode where only 
those phone numbers contained in EFp^ and EFp^Qwjare used. 

If FDNTETRA is enabled (i.e. EF ADNTETRA is invalidated or not present) the ME shall operate in a restricted mode 
where only fchose phone numbers contained in EF FDNTETRA are used. 

Both modes FDN and FDNTETRA can be enabled independently of each other. 

ADNGVVT and FDNGWT are mutually exclusive of each other and independent of the state of ADNTETRA and 
FDNTETRA. Likewise, ADNTETRA and FDNTETRA are mutually exclusive of each other and independent of the 
state of ADNGWT and FDNGWT. This means that there may be restricted ADNGWT phonebook operation or 
restricted TETRA phonebook operation and these are independent of each other. 

The following three procedures are only applicable to service no.4 (FDNTETRA) no.5 (FDNGWT). As an example, the 
following procedures are described as applied to FDNGWT. 

1 1.7.3.1 FDNGWT capability request 

To ascertain the state of FDNGWT, the ME checks in EF SST whether or not ADNGWT is activated. If ADNGWT is 
not activated, service no.5 is enabled. If ADNGWT is activated, the ME checks the response data EF ADNCWT . If 
EF ADNCWT are invalidated, service no.5 is enabled. In all other cases service no.5 is disabled. 
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1 1 .7.3.2 FDNGWT disabling 

The FDNGWT disabling procedure requires thai PIN2 verification procedure has been performed successfully and thai 
ADNGWT is activated. If not, FDNGWT disabling procedure will not be executed successfully. To disable FDNGWT 
capability, the ME rehabilitates EF ADNGWT . The invalidate/rehabilitate flag of EF ADNCwT , which are set by the 
REHABILITATE command, is at the same time the indicator for the state of the service no.5. If ADNGWT is not 
activated, disabling of FDNGWT is not possible and thus service no.5 is always enabled (see FDNGWT capability 
request). 

11.7.3.3 FDNGWT enabling 

The FDNGWT enabling procedure requires that PIN2 verification procedure has been performed successfully. If not, 
FDNGWT enabling procedure will not be executed successfully. To enable FDNGWT capability, the ME invalidates 
EF ADNGWT- Thc invalidate/rehabilitate flag of EF ADNCWT , which is set by die INVALIDATE command, is at the same 
time the indicator for the state of the service no.5 (see FDNGWT capability request) If ADNGWT is not activated, 
service no.5 is always enabled. 

Invalidated ADNGWTs may optionally still be readable and undatable depending on the file status (see clause 9.4). 

1 1 .8 Status and short data message procedures 

The procedures listed in this clause are only executable if the associated services, which are optional, are provided in 
the SIM. However, if the procedures are implemented, it shall be in accordance with the requirement stated in this 
clause. If a procedure is related to a specific service indicated in the SIM service table, it shall only be executed if the 
corresponding bit denoiing this service as "available" (see EF SST ). In all other cases this procedure shall not start. 

1 1 .8.f Display of status message texts 

• Requirement: Service no.22 "available". 

• Request: The SIM selects EF STXT and searches for the identified status message value. If the 

message value is found it performs the reading procedure with EF STXT . 

1 1 .8.2 Display of SDS1 message texts 

• Requirement: Service no.23 "available". 

• Request: The SIM selects EF MSGTXT and searches for the identified status message value. If the 

message value is found it performs the reading procedure with EF MSCTXT . 

1 1 .8.3 Storage of status and SDS messages types 1 , 2 and 3 

• Requirement: Service no.24 "available". 

• Request: The SIM selects EF SDS | 2 3 and searches for the identified status or SDS message. If this 

message is found, the ME performs the reading procedure with EF SDS|23 

• Update: The ME looks for the next available area to store the status or SDS message in EF SDSP3 . If 

such an area is available, it performs the updating procedure with EF SDS1 1 23 

If there is no available empty space in the SIM to store the received short message, thc ME 
advises the user. 

• Erasure: The ME selects EF$DSi23 and identifies the records to be erased. Then it performs the 

update procedure to mark them as free. 
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NOTE: Depending on the ME, ihe message may be read before the record is marked as Tree"; After performing 
the updating procedure with EF SDS)23 , the memory allocated to this short message in the SIM is made 
available for a new incoming message. The memory of the SIM may still contain the old message until a 
new message is stored in that area. 

1 1 .8.4 Storage of SDS messages type 4 



• Requirement: 

• Request: 

• Update: 



Erasure: 



Service no.25 "available". 

The SIM selects EF SDS4 and searches for the identified short message. If this message is 
found, the ME performs the reading procedure. 

The ME looks for the next available area to store the short message in EF SDS4 . If such an 
area is available, it performs the updating procedure with EF SDS4 . 

If there is no available empty space in the SIM to store the received short message, the ME 
advises the user. 

The ME selects EF SDS4 and identifies the records to be erased. Then it performs the update 
procedure to mark them as free. 



NOTE: Depending on the ME, the message may be read before the record is marked as "free". After performing 
the updating procedure with EF SDSI23 , the memory allocated to this short message in the SIM is made 
available for a new incoming message. The memory of the SIM may still contain the old message until a 
new message is stored in that area. 



1 1 .8.5 SDS delivery report 

• Requirement: Service number 32 "available" 



Request: 



Update: 



Erasure: 



Purge: 



If the status of a stored short message indicates that there is a corresponding status report, 
the ME performs the seek function with EF SDSR to identify the record containing the 
appropriate status report. The ME performs the reading procedure with EF SDSR . 

If the status report is received, the ME first seeks within the SDS record identifiers of 
EF SDSR *° r me same ^cord number it used for the short message in EF SDS4 . If such a 
record identifier is found in EF SDSR> it is used for storage. If such a record identifier is not 
found, then the ME seeks for a free entry in EF $DSR for storage. If no free entry is found, 
the ME runs the Purge procedure with EF $DSR . If there is still no free entry, the status 
report is not stored. 

If the ME found an appropriate record in EF SDSR for storage, it updates the record with the 
status report setting the record identifier in EF SDSR to the appropriate record number of the 
short message in EF SDS4 . 

The status in EF SDS4 is updated accordingly (see clause 10.3.42) by performing update 
procedure with EF SDS4 . 

The ME runs the update procedure with EF SDSR by storing "OO" in the first byte of the 
record. 

The ME shall read the SDS record identifier (byte 1) of each record of EF SDSR . With each 
record the ME checks the corresponding SDS message in EF $DS4 . If the status of the 
corresponding SDS is not equal to "status report requested, received and stored in EF SDSR " 
the ME shall perform the erasure procedure with the appropriate record in EF SDSR . 
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1 1 .8.6 Default Status Target 

• Requirement: Service number 31 "available". 

• Request: The ME checks whether a destination address has been specified if not then the ME 

performs the read procedure with EFdflTSTSTGT* 

• Update: The ME runs the update procedure with EFoKtTSTSTGT 
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Annex A: 
Void 
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Annex B (informative): 
FDN Procedures 

The FDN facility allows operation of the TETRA terminal in a restricted state whereby it can only initiate calls to a 
pre -determined destination or list of destinations. 

A TETRA SIM may be personalized so thai the terminal can be operated in only the restricted stale, only the 
unrestricted stale or to allow the operation mode to be switched between states through the MMI. 

FDN services: 

Two FDN services arc provided for the TETRA SIM. Service number 4 allows fixed dialling to other TETRA addresses 
while service number 5 allows fixed dialling to destinations on a PABX or the PSTN. These services may be 
individually or jointly enabled as indicated in the SIM service table. 

The SIM service tabic provides an enable/disable indicator for each of the two FDN services to indicate to the ME the 
capabilities of the SIM. Where the SIM service table indicates that the SIM is capable of both ADN and FDN services, 
the operating state can be switched as described below. 

FDN operation: 

When the ME is operating in the restricted FDN state, the user may only call destinations listed in the FDN directories 
EF FDN (service no 5) anchor EF FDNTKTRA (service no 4). Attempts to call other destinations shall be rejected by the 
ME, other than those initiated by activation of the emergency call procedures. 

FDN initialization: 

When a TETRA session is initialized, the ME should check the SIM service table for the state of the FDN services. Jf 
neither service is enabled, the ME should enter the unrestricted operation state, offering facilities as otherwise indicated 
in the SLM service table. 

If either of the FDN services are enabled in the SIM service table, the ME should further check the entries for ADN 
(service no 2) and ADNTETRA (service no. 3). If neither ADN service is enabled the ME should enter the restricted 
FDN operation state. 

If both ADN and FDN services are enabled in the SIM service table, the operation mode may be determined by the 
validity of EF ADN . If EF ADN is invalidated, the ME should enter ihe restricted FDN operation state. If EF ADN is not 
invalidated, the ME should enter the unrestricted state. 

Change of FDN operation mode: 

Where the SIM Service Table indicates that a SIM supports both FDN and unrestricted modes of operation, the validity 
of the file EF ADN provides the indicator as to the current operating state as described above. 

The ME may provide an MMI operation to allow toggling of the operation state by performing invalidation or 
rehabilitation of EF ADN . This procedure can only be performed after successful completion of the PIN2 verification 
procedure to satisfy the access rights for EF ADN . 

Change of FDN access details: 

The ME may provide a method on the MMI to change entries in the FDN directories, thereby changing the list of call 
destination when the ME is operating in the restricted state. This procedure can only be performed after successful 
completion of the PIN2 verification procedure to satisfy the access rights for update to EFpr^. 
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Annex C (informative): 

Suggested contents of EFs at pre-personalization 

If EFs have an unassigned value, it may not be clear from the main text what this value should be after conclusion of the 
manufacturing phase and prior to personalizaiion of initial usage. This annex suggests values in these cases in 
tables C. I toC3. 

The values stored in EF CCK . EF SCK , EFq^ and EF MCCK may only be changed using the appropriate OTAR 
algorithms in the TAA I set. The initial values to be stored may be assigned by the network operator and loaded during 
the manufacturing phase. If particular values are not assigned it is suggested that these Hies are populated with a null 
value, "00... 00". 



C.1 Contents of the EFs at the MF level 



Table C.1: Contents of the EFs at the MF level after pre-personalization 



File 
Identification 


Description 


Value 


EF lCClO 


Card identification 


Operator dependent (see clause 10.2.1) 


EF DIR 


Application directory 


"FF...FF" 


EF LP 


Language preference 


Operator dependent (see clause 10.2.3) 



C.2 Contents of the EFs at the TETRA application level 



Table C.2: Contents of the EFs at the TETRA application level after pre-personalization 



File Identification 


Description 


Value 


EF AD 


Administrative Data 


See clause 10.3.50 


EF ADNGWT 


Abbreviated Dialling Number with Gateway 


"FF...FF" 


EF ADNTETRA 


Abbreviated Dialling Numbers for TETRA 
network 


-FF...FF* 


EF ARR 


Access Rule Reference 




EF CCK 


Common Cipher Key 


Operator dependent (see clause 10.3.7) 


EF CCKLOC 


CCK Location Areas 


Operator dependent (see clause 10.3.8) 


EF CMT 


Call modifier table 


'FF...FP 


EF DFLTSTSTGT 


Default Status Target 


"FF...FF" 


EF D!ALSC 


Dialling schemes for TETRA network 


'FF...FF* 


EF OMOCH 


DMO Channel Information 


"FF...FF" 


EF DMO_DEP 


Default encryption parameters 


"FF...FP | 


EF DMO_GRDS 


Group related data for DMO static GSSIs 


Operator dependent (see clause 10.3.65), else 
"FF...FF* 


EF DMO_GSSIS 


DMO pre-programmed group numbers 


Operator dependent (see clause 10.3.64), else 
"FF...FF" 


EF DNWRK 


Broadcast network information 


■00...00" 


EF EADDR 


Emergency address 


"FF...FF" 


EF EINFO 


Emergency call information 


*00" 


EF EXTA 


Extension A 


"FF...FF" 


EF FDNGWT 


Fixed Dialling Number with Gateway 


-FF...FF" 


EF FDNTETRA 


Fixed Dialling Numbers for TETRA network 


"FF...FF" 


EF FORBIO 


Forbidden networks table 


Operator dependent (see clause 10.3.18), else 
"FF...FF" 
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rile identification 


Description 


Value 


^GCK 


jfouo Cioher Kevs 


<syJK,ia\yj\ ucpvi lUCHI ^otJfc? CldUSv 1U,£« ill 


cr GlNFO 




^(jerdior uupenueni ^see Clause lu.o.lo), else 
•00 00FF...FF FF 00 FF FF FP" j 


EF GRDD 


Group related data for Dynamic GSSIs 


"FF...FF" 


EF GRDS 


Group related data for Static GSSIs 


Operator dependent (see clause 10.3.11), else 
"FF...FF" 


EF GSKO 


Group Session Key 


H FF...FF" 


EF GSSID 


Dynamic GSSIs 


"FF...FF" 


EF GSSIS 


Pre-programmed GSSIs 


Operator dependent (see clause 10.2.10) 


EF GDMO_GTMO 


DMO - TMO selected group association 


■FF...FF" j 


EF GTMO_GDMO 


TMO - DMO selected group association 


"FF...FF" 


EF GWT 


Gateway Table 


Operator dependent (see clause 10.3.24). else 
■FF...FF" 


tr GWTEXTl 


Gateway Extensionl 


"FF...FF" 


cc 

"GWTEXT2 


Gateway Extension2 


"FF...FF" 


EF GWTXT3 


Gateway Extension3 


"FF...FF" 


EF ITSI 


ITSI 


Operator dependent (see clause 10.3.2) 


EF ITSIDtS 


ITS1 Disabled 


"OO" 


EF KH 


List of Key Holders 


See clause 10.3.48 


c c 

th LNDCOMP 


Composite LND file 


"FF...FF" 


EF LNDGWT 


Last Number Dialled with Gateway 


"FF...FF" 


EF LNDTETRA 


Last Number Dialled forTETRA network 


■FF...FF" 


EfL MGCK 


Modified Group Cipher Keys 


Operator dependent (see clause 10.3.15) 


EF MSCH 


MS allocation of DMO c -annels 


"FF...FF" 


EF MSGEXT 


Message Extension 


"FF...FF" 


MSGTXT 


SDS-1 messaae texts 


"FF...FF" 


EF NWT 




1 st record operator dependent 
(see clause 10.3.24). else "FF...FF" 


EF PHASE 


Phase identifit <tion 


-or 


EF PNI 


Private Number Information 


"FF...FF" 


EF PREF 


Preferred networks table 


Operator dependent (see clause 10.3.19), else 
"FF...FF M 


rr 

£P PREF LA 


Preferred Location Areas 


"FF...FF" 


cp REPGATE 


DMO repeater and gateway list 


"FF...FF" 


EF SCAN 


Scan list files 




EF SCAND 


Scan list data 




cc , 


oiauc s^ipner i\ey 


Operator dependent (see clause 10.3.9) 


th SCT 


ouoocnusr ciass iapie 


Operator dependent (see clause 10.3.5) 


EF SDNGWT 


oervice uidinng iNumDers wim oaieway 


•cc cc* 

pp... rr j 


EF SDNTETRA 


^flr>/i(*0 Piiallinn Mumhorc \r\r TCTBA 

ociviutj LJidiiiny iNUmuerb lor icinM 
network 


"CC cc* 
rr. ..rr 


EF SDS123 


Status and SDS type 1 , 2 and 3 message 
storage 


•FF...FF" 


EF S0S4 


SDS type 4 message storage 


TF...FF" 


EF SOSMEM_STATUS 


SDS Memory Status 




EF SDSP 


SDS Parameters 


"FF...FF" 


EF SDSR 


SDS delivery report 


'00.. .00" 


EF SPN 


Service Provider Name 


"FF...FF 
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File Identification 


Description 


Value 


EF SST - 


SIM.Service-Table- - 


Operator-dependent (see clause 10. 3:T)reise — 
■00...00* 


EF STXT 


Status message texts 


Operator dependent (see clause 10.3.39) 


EF UNAME 


Usemame 


■FF...FF* 


EF WELCOME 


Welcome message 


Operator dependent (see clause 10.3.55), else 
"FF...FP 



C.3 Contents of the EFs at the Telecom Level 

Table C.3: Contents of the EFs at the Telecom level after pre-personalization 



File 
Identification 


Description 


Value 


EF ADN 


Abbreviated Dialling Numbers 


"FF...FF" 


EF F0N | 


Fixed Dialling Numbers 


"FF...FF" 


EF MS!SDN 


MSISDN 


"FF...FF- 


EF LND 


Last Number Dialled 


"FF...FF" 


EF SDN 


Service Dialling Numbers 


"FF...FF" 


EF EXT1 


Extension 1 


"FF...FF" 


EF EXT2 


Extension2 


"FF...FF- 


EF EXT3 


Extension3 


"FF...FF" 



BNSCOCID <X? 23457?oa ... 



ETSI 



132 



ETSI TS 100 812-2 V2.3.1 (2003-10) 



Annex D (normative): 

Database structure for group IDs and phone books 

Use of the network table: 

Relational database mechanisms arc used to save a significant amount of memory. Several EFs (e.g. EF GSSIS and 
ef CSS1d) re ^ er 10 tne Network table for network address instead of saving it with each group short subscriber identity. 
However, since a network address can be referenced from more than one place, a record pointer counter is needed to 
keep track of how many times a network address is referenced. When the record pointer counter of a network address is 
one, it is referenced from only one place. When that address is removed, the corresponding network address can be 
removed also, since it was the only one using it. This housekeeping method is used to remove unnecessary network 
addresses from the network table. Refer to figure D. I . 

The network table is thus handled using the following procedures: 

• When a network address needs to be stored with a record, the network table (EF NWT see clause 10.3.23) needs 
to be read. If the address (MCC and MNC) is already found on the network table, the Record pointer counter 
of the found network address record needs to be increased by one. Only the record number of the network 
address on the network table is stored with the record that needs the network address. 

• If the address is not found on the network table, a new record needs to be added to the network table. On the 
network table the new network address (MCC and MNC) is stored along with a record pointer counter, which 
is set to one. Only the record number of the network address on the network table is stored with the record that 
needs the network address. 



If the desired network address is not found in the network table, and it cannot be added because of the file 
being full, the new network address cannot be stored on the SIM. 

If a record that uses a network address in the network table needs to be deleted, the network table also needs to 
be updated. The record that needs to be updated can be found using the record number. The record number is 
stored with the record that is to be deleted. When the record in the network table is found, the record pointer 
counter is read. If the value of the counter is 2 or higher, the counter is decreased by one and the record that 
referenced it can be deleted. 

If the record pointer counter is I , the whole record on the network table can be deleted (indicated as free by 
filling it with "FF's) along with the record thai pointed to that record. 
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Figure D.1: Graphical presentation of group data related EF structures 
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Figure D.2 shows how records in phonebook related EFs can poini lo records in other phonebook related EFs. 



NOTE: Each of ihe 8 phonebooks (ADNGVVT LNDGWT, FDNGWT, SDNGWT, ADNTETRA, LNDTETRA, 
FDNTETRA and SDNTETRA) may point to EF CMT , which is not shown on the diagram. 
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Figure D.2: Graphical presentation of phonebook related EF structures 
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Annex E (informative): 

Emergency call facilities and procedures 

The TETRA standards provide a wide variety of call types and facilities which may be used in an emergency situation. 
The activation of an emergency facility is implementation-specific and so the file content defined for the TETRA SIM 
card is intended to offer flexibility in handling emergency situations. This annex offers further explanation of the 
information available to the ME in handling an emergency situation. 

Emergency call control: 

The EF EINFO contains a control flag to indicate to the whether or not emergency calls are enabled for this particular 
card. 

Emergency call addresses: 

The EF EADDR contains a list of call destinations for use in an emergency call. Entries in the file can require that the call 
be placed to either the last group in which the ME took part or to a pre-defined destination. When the file contains more 
than one address, it is suggested that the order of the records in the file should indicate the order of preference for the 
call, starting with the highest preference. 

Each record in EF EADDR also contains a number of flags providing an indication as to the type of the call address, 
allowing a mix of call types to be indicated. The call type can be one of a selection of 10 variants, including all of the 
common speech calls and short data transactions. For circuit mode calls, a data field indicates the nature of the required 
call i.e. individual, group, acknowledged group or broadcast. 

When the emergency call type is a status or short data transaction, an additional option is selected by a flag which may 
be used to' indicate a preference as to the source of the data to be transferred in an emergency message. When the 
pre-defined value stored in the card is selected, a record number pointer indicates EF SDSl23 or EF SDS4 which contain 
both the destination and message content. When the "application" source is selected, it is suggested that the contents of 
the data field would be obtained by an application running in the ME. 

Protection for interrupted emergency calls: 

The EF EF ECsJ pQ contains a flag indicating the action to be taken on power-on after an interrupted emergency call - to 
optionally resume the emergency call without further operator intervention. 

Where EF EINF0 indicates that an interrupted emergency call should be continued next time the ME is powered up, the 
ME should maintain the current emergency call index in EF ElNF0 during any emergency call procedure. In particular, 
the index should be set by the ME to a value to be understood by the restarting ME as the call is initiated and zeroed on 
normal termination. The index allows the restarting ME to establish that an emergency transaction was in progress and t 
from the index, which of the available call options to restart. The coding of the index is implementation-dependant but 
is dimensioned so that it can be used as a pointer to a record number in EF EADDR if required. 

Successful connection of an emergency call: 

It is suggested above that the ME should attempt to set up the emergency call to each of the destinations prescribed in 
EF EADDR until a successful connection is achieved. 

It should, however, be noted that not all call types provide a definite indication of success. An unacknowledged group 
call, for example, may succeed in establishing a "call" but it is possible that no other member of the group could be 
available and so (he result would be no exchange of useful information. For PABX or PSTN voice calls, call routing 
beyond the TETRA infrastructure may not be able to return a definite indication of a successful exchange to the 
originating terminal and so a call to an unanswered or engaged number could result. The implementation of the 
emergency facility may take account of this possibility in controlling ihe emergency call. 
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Emergency calls in Direct Mode: 

When an emergency call record in EF^qqr requires the use of dircci mode, ihe implemeniaiion may handle Ihe 
possibility of ihe required party being on one of a multiplicity of DMO channels. The record in EF^^r includes a 
field to indicate a channel number explicitly. It is suggested thai a zero channel number could cause the ME to use ihe 
flags provided in EF DM0Ch which designate a channel for emergency use in attempting to set up the call. 

Emergency calls when the SIM card is not fitted: * 

Where the ME is not equipped with a SIM interface, or the SIM is absent, it must still be possible, for some 
applications, to make an emergency call. 
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Annex F (informative): 

Composite List of Last Dialled Numbers 

Each phonebook has a distinct file holding a list of Last Numbers Dialled (LND). When a subscriber initiates a call in a 
particular mode, the called number is written to the corresponding LND Tile. Table F.I summarizes the link between the 
handsel mode, phonebook elementary file and the LND elementary file. 

Table F.1 



Mode 


Phonebook 


Last Number Dialled 


PSTN 


EF ADN 


EF LND 


PABX 


EF ADNGWT 


EF LNDGWT 


PRIVATE 


EF ADNTETRA 


EF LNDTETRA 


GROUP 


EF GSSIS /EF GSS!D 


Non-existent 



The navigation of the MM I may be simplified for the user if only one (composite) list of Last Dialled Numbers is 
maintained to permit the user to review the Last Numbers Dialled in reverse chronological order. The composite LND 
file enables this functionality to be offered because each mode (except GROUP) has a distinct LND file and entries in 
these files are not lirnestamped and therefore cannot be sorted in lime. 

Operation of EF LNI)Comp : 

The composite LND file is updated with a pointer to the relevant individual LND file when a call is originated. The 
pointer includes the file identifier and record number for the relevant LND file. 

The relationship between the files is shown in figure F.l. 
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Figure F.1 : Graphical representation of relationship between the LND files 
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It is recommended (hat a maximum file length equal to the length of one of the individual LND files is used. The 
reasoning-is ihat if-EFy^^^p-ts longer-ihan one of the individual bND flics it will be quicker to find the original 
dialling number in the phone books. 



BNSDOCID- <XP 23A577«a I > 



ETSI 



138 



ETSI TS 100 812-2 V2.3.1 (2003-10) 



Annex G (informative): 
Bibliography 

• CEN EN 726-3: "Terminal Equipment (TE): Requirements for IC cards and terminals for telecommunication 
use - Pari 3: Application independent card requirements". 

• CEN EN 726-4: "Terminal Equipment (TE); Requirements for IC cards and terminals for telecommunication 
use - Part 4: Application independent card related terminal requirements' 1 . 
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Annex H (informative): 
Change requests 

The present document contains Change Requests as described in the table H.l . 

NOTE I : The Change Requests CR20 1 to CR2 1 4 arc originally drafted for EN 300 8 1 2 and for lhai reason *CH V I • 
in the Change Requests arc in the present document "PINT. 

NOTE 2: Many of the clause numbers in the EN 300 8 1 2 are one less than in present version of the ES 200 812-2. 
The clause numbers of the Change Requests arc adapted to ones of the present document. 
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